WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pepro-ultimate-invoice
Published
2024-04-15
Title
PeproDev Ultimate Invoice < 2.0.2 - Missing Authorisation
Slug
pepro-ultimate-invoice
Published
2024-10-15
Title
PeproDev Ultimate Invoice < 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pepro-ultimate-invoice
Published
2025-02-18
Title
PeproDev Ultimate Invoice < 2.1.0 - Insecure Direct Object Reference to Unauthenticated Order Information Exposure
Slug
pepro-ultimate-invoice
Published
2026-03-04
Title
PeproDev Ultimate Invoice < 2.2.6 - Unauthenticated Invoice Archive Download
Slug
pepro-ultimate-invoice
Published
2026-07-23
Title
PeproDev Ultimate Invoice <= 2.2.6 - Missing Authorization
Slug
pepro-ultimate-invoice
Published
2026-07-23
Title
PeproDev Ultimate Invoice <= 2.2.6 - Unauthenticated Stored Cross-Site Scripting
Slug
pepro-ultimate-invoice
Published
2026-07-23
Title
PeproDev Ultimate Invoice <= 2.2.6 - Unauthenticated Information Exposure
Slug
pepro-ultimate-invoice
Published
2026-07-23
Title
PeproDev Ultimate Invoice <= 2.2.6 - Unauthenticated Server-Side Request Forgery
Slug
peprodev-ups
Published
2025-05-06
Title
PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Limited Unauthenticated Arbitrary User Meta Update
Slug
peprodev-ups
Published
2025-05-06
Title
PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Authentication Bypass to Account Takeover
Slug
peprodev-ups
Published
2025-05-06
Title
PeproDev Ultimate Profile Solutions 1.9.1 - 7.5.2 - Unauthenticated Email Enumeration
Slug
peprodev-ups
Published
2026-10-09
Title
PeproDev Ultimate Profile Solutions < 8.2.37 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'button' Attribute
Slug
per-page-add-to
Published
2021-08-11
Title
Per Page Add to Head <= 1.4.4 - Authenticated Stored XSS
Slug
per-page-add-to
Published
2021-08-11
Title
Per Page Add to Head < 1.4.4 - CSRF to Stored XSS
Slug
percent-to-infograph
Published
2026-02-13
Title
Percent to Infograph <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
perelandra-sermons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
perelandra-sermons
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
perelandra-sermons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
perelink
Published
2023-07-24
Title
Perelink Pro <= 2.1.4 - Settings Update via CSRF
Slug
perfect-font-awesome-integration
Published
2024-12-11
Title
Perfect Font Awesome Integration < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
perfect-font-awesome-integration
Published
2025-04-01
Title
Perfect Font Awesome Integration < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
perfect-portal-widgets
Published
2025-01-10
Title
Perfect Portal Widgets < 3.0.4 - Contributor+ Stored XSS
Slug
perfect-pullquotes
Published
2024-04-30
Title
Perfect Pullquotes <= 1.7.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
perfect-survey
Published
2021-10-05
Title
Perfect Survey < 1.5.2 - Unauthenticated SQL Injection
Slug
perfect-survey
Published
2021-10-05
Title
Perfect Survey < 1.5.2 - Unauthorised AJAX Call to Stored XSS / Survey Settings Update