WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
perfect-survey
Published
2021-10-05
Title
Perfect Survey < 1.5.2 - Reflected Cross-Site Scripting
Slug
perfect-survey
Published
2021-10-05
Title
Perfect Survey < 1.5.2 - Unauthenticated Stored Cross-Site Scripting
Slug
perfect-woocommerce-brands
Published
2022-01-28
Title
Perfect Brands for WooCommerce < 2.0.5 - Subscriber+ Arbitrary Brand Creation
Slug
perfect-woocommerce-brands
Published
2022-01-28
Title
Perfect Brands for WooCommerce < 2.0.5 - Subscriber+ Sensitive Information Disclosure
Slug
perfect-woocommerce-brands
Published
2025-09-22
Title
Perfect Brands for WooCommerce < 3.6.3 - Authenticated (Contributor+) SQL Injection
Slug
perfect-woocommerce-brands
Published
2025-11-24
Title
Perfect Brands for WooCommerce < 3.6.3 - Authenticated (Contributor+) SQL Injection
Slug
perfit-woocommerce
Published
2026-01-13
Title
Perfit WooCommerce <= 1.0.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Settings Deletion
Slug
perfmatters
Published
2023-11-21
Title
Perfmatters < 2.1.7 - Reflected Cross-Site Scripting
Slug
perfmatters
Published
2023-11-21
Title
Perfmatters < 2.1.7 - Cross-Site Request Forgery
Slug
perfmatters
Published
2023-11-20
Title
Perfmatters < 2.1.7 - Missing Authorization
Slug
perfmatters
Published
2023-11-21
Title
Perfmatters < 2.2.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
perfmatters
Published
2026-04-02
Title
Perfmatters < 2.6.0 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter
Slug
perfmatters
Published
2026-04-09
Title
Perfmatters < 2.6.0 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' Parameter
Slug
perfmatters
Published
2026-06-25
Title
Perfmatters < 2.6.4 - Reflected Cross-Site Scripting
Slug
perfmatters
Published
2026-07-01
Title
Perfmatters < 2.6.5 - Unauthenticated Arbitrary File Read via 's' Parameter
Slug
perfmatters
Published
2026-06-30
Title
Perfmatters < 2.6.5 - Unauthenticated Stored Cross-Site Scripting
Slug
performance-kit
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
performance-lab
Published
2023-05-18
Title
Performance Lab < 2.3.0 - CSRF
Slug
performance-monitor
Published
2026-03-10
Title
Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRF
Slug
performance-monitor
Published
2026-03-20
Title
Performance Monitor <= 1.0.6 - Unauthenticated Server-Side Request Forgery via 'url' Parameter
Slug
permalink-finder
Published
2025-01-30
Title
Link Fixer <= 3.4 - Unauthenticated Stored Cross-Site Scripting
Slug
permalink-manager
Published
2021-09-27
Title
Permalink Manager Lite < 2.2.13.1 - Admin+ SQL Injection
Slug
permalink-manager
Published
2022-01-17
Title
Permalink Manager < 2.2.15 - Reflected Cross-Site Scripting
Slug
permalink-manager
Published
2022-11-16
Title
Permalink Manager Lite < 2.2.20.2 - Settings Update via CSRF
Slug
permalink-manager
Published
2022-11-01
Title
Permalink Manager Lite < 2.2.20.1 - Unauthenticated URI Deletion