WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
persian-fonts
Published
2024-01-30
Title
Persian Fonts <= 1.6 - Admin+ Stored XSS
Slug
persian-gravity-forms
Published
2026-07-12
Title
sync-basalam < 3.0.3 - Authenticated (Administrator+) SQL Injection
Slug
persian-nested-showhide-text
Published
2024-11-08
Title
Persian Nested Show/Hide Text <= 1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
persian-woocommerce
Published
2022-02-15
Title
Persian Woocommerce < 5.9.8 - Reflected Cross-Site Scripting
Slug
persian-woocommerce
Published
2024-08-09
Title
Persian WooCommerce < 9.0.0 - Missing Authorization
Slug
persian-woocommerce-shipping
Published
2025-03-27
Title
persian-woocommerce-shipping < 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
persian-woocommerce-shipping
Published
2026-07-23
Title
افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری <= 4.4.5 - Cross-Site Request Forgery
Slug
persian-woocommerce-sms
Published
2016-04-21
Title
Persian Woocommerce SMS <= 3.3.3 - Reflected Cross-Site Scripting (XSS)
Slug
persian-woocommerce-sms
Published
2024-10-16
Title
Persian WooCommerce SMS < 7.0.3 - Reflected Cross-Site Scripting
Slug
persian-woocommerce-sms
Published
2024-12-06
Title
افزونه پیامک ووکامرس Persian WooCommerce SMS < 7.0.6 - Reflected Cross-Site Scripting
Slug
persian-woocommerce-sms
Published
2024-12-11
Title
Persian Woocommerce SMS < 7.0.6 - Reflected Cross-Site Scripting
Slug
persian-woocommerce-sms
Published
2025-06-05
Title
Persian Woocommerce SMS < 7.1.0 - Authenticated (Shop manager+) SQL Injection
Slug
persian-woocommerce-sms
Published
2026-02-11
Title
Persian Woocommerce SMS <= 7.1.1 - Reflected Cross-Site Scripting
Slug
persian-woocommerce-sms
Published
2026-07-23
Title
افزونه پیامک ووکامرس Persian WooCommerce SMS <= 7.2.2 - Authenticated (Shop manager+) SQL Injection
Slug
personal-authors-category
Published
2026-02-13
Title
personal-authors-category <= 0.3 - Reflected Cross-Site Scripting
Slug
personal-dictionary
Published
2022-04-18
Title
Personal Dictionary < 1.3.4 - Unauthenticated SQLi
Slug
personal-favicon
Published
2025-06-05
Title
Personal Favicon <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
personal-qr-message
Published
2026-07-24
Title
Personal QR Message <= 1.0 - Unauthenticated Arbitrary File Upload
Slug
personalization-by-flowcraft
Published
2024-11-13
Title
Advanced Personalization <= 1.1.2 - Unauthenticated PHP Object Injection
Slug
personalize-woocommerce-cart-page
Published
2019-06-19
Title
Personalized WooCommerce Cart Page <= 2.4 - Cross-Site Request Forgery (CSRF)
Slug
personalize-woocommerce-cart-page
Published
2025-01-24
Title
GoHero Store Customizer for WooCommerce < 4.0 - Missing Authorization to Unuthenticated Settings Update
Slug
personizely
Published
2025-05-02
Title
Personizely < 0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via widgetId Parameter
Slug
pesapal-for-woocommerce
Published
2025-03-27
Title
Pesapal Gateway for Woocommerce <= 2.1.0 - Reflected Cross-Site Scripting
Slug
pet-manager
Published
2024-05-02
Title
Pet Manager <= 1.4 - Contributor+ Stored XSS
Slug
pet-manager
Published
2024-05-02
Title
Pet Manager <= 1.4 - Reflected XSS