WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
piotnet-addons-for-elementor
Published
2025-01-07
Title
Piotnet Addons For Elementor < 2.4.32 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Heading Widget
Slug
piotnet-addons-for-elementor
Published
2025-01-03
Title
Piotnet Addons For Elementor < 2.4.32 - Contributor+ Stored XSS
Slug
piotnet-addons-for-elementor
Published
2025-01-14
Title
Piotnet Addons For Elementor < 2.4.33 - Authenticated (Contributor+) Post Disclosure
Slug
piotnet-addons-for-elementor
Published
2025-04-04
Title
Piotnet Addons For Elementor <= 2.4.36 - Contributor+ Stored XSS
Slug
piotnet-addons-for-elementor
Published
2025-04-17
Title
Piotnet Addons For Elementor <= 2.4.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
piotnet-addons-for-elementor-pro
Published
2024-04-25
Title
Piotnet Addons For Elementor Pro <= 7.1.17 - Missing Authorization to Arbitrary Post/Page Deletion
Slug
piotnet-addons-for-elementor-pro
Published
2024-04-25
Title
Piotnet Addons For Elementor Pro <= 7.1.17 - Unauthenticated Server-Side Request Forgery
Slug
piotnet-addons-for-elementor-pro
Published
2024-04-25
Title
Piotnet Addons For Elementor Pro <= 7.1.17 - Reflected Cross-Site Scripting
Slug
piotnet-addons-for-elementor-pro
Published
2024-05-25
Title
Piotnet Addons For Elementor Pro <= 7.1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
piotnet-addons-for-elementor-pro
Published
2024-05-25
Title
Piotnet Addons For Elementor Pro <= 7.1.17 - Cross-Site Request Forgery
Slug
piotnetforms
Published
2023-12-04
Title
Piotnet Forms < 1.0.29 - Unauthenticated Arbitrary File Upload
Slug
piotnetforms
Published
2023-12-27
Title
Piotnet Forms Plugin < 1.0.29 - Unauthenticated Arbitrary File Upload
Slug
piotnetforms
Published
2023-12-27
Title
Piotnet Forms < 1.0.30 - Missing Authorization via multiple AJAX actions
Slug
piotnetforms
Published
2025-04-01
Title
Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
piotnetforms
Published
2025-04-01
Title
Piotnet Forms <= 1.0.30 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
piotnetforms
Published
2025-04-07
Title
Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Path Traversal
Slug
piotnetforms
Published
2025-09-22
Title
Piotnet Forms <= 1.0.30 - Cross-Site Request Forgery
Slug
pipdisqus
Published
2025-03-11
Title
pipDisqus < 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
pirate-forms
Published
2019-07-27
Title
Pirate Forms < 2.5.2 - HTML Injection & CSRF
Slug
pirate-forms
Published
2025-01-29
Title
Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
pirate-forms
Published
2025-03-03
Title
Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS
Slug
pirate-forms
Published
2025-03-03
Title
Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS
Slug
pit-login-welcome
Published
2025-01-16
Title
Pit Login Welcome <= 1.1.5 - Reflected Cross-Site Scripting
Slug
pitchprint
Published
2026-03-10
Title
PitchPrint < 11.2.0 - Unauthenticated Arbitrary File Deletion
Slug
piwigopress
Published
2025-02-24
Title
PiwigoPress <= 2.33 - Authenticated (Contributor+) Stored Cross-Site Scripting