WordPress Plugin Vulnerabilities | Page 31 | WPScan

0-9
a
b
c
d
e
f
g
h
i
j
k
l
m
n
o
p
q
r
s
t
u
v
w
x
y
z

Slug

Published

2021-10-21

Title

Pie Register < 3.7.2.4 - Open Redirect

Slug

Published

2022-11-28

Title

Pie Register < 3.8.1.3 - Unauthenticated Arbitrary User Deletion

Slug

Published

2023-02-06

Title

Pie Register < 3.8.2.3 - Open Redirect

Slug

Published

2024-03-13

Title

Pie Register < 3.8.3.3 - Unauthenticated Arbitrary File Upload

Slug

Published

2024-07-08

Title

Pie Register - Basic <= 3.8.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation and Activation/Deactivation

Slug

Published

2025-02-20

Title

Registration Forms < 3.8.4.1 - Sensitive Information Exposure via Log Files

Slug

Published

2026-01-20

Title

Pie Register < 3.8.4.9 - Missing Authorization

Slug

Published

2026-04-03

Title

Pie Register – User Registration, Profiles & Content Restriction < 3.8.4.9 - Missing Authorization to Unauthenticated Registration Form Status Modification

Slug

Published

2026-06-01

Title

Pie Register < 3.8.4.10 - Unauthenticated Email Verification Bypass via Predictable Token

Slug

pie-register-premium

Published

2024-11-11

Title

Pie Register Premium < 3.8.3.3 - Missing Authorization

Slug

pie-register-premium

Published

2024-12-02

Title

Pie Register Premium < 3.8.3.3 - Unauthenticated Arbitrary File Upload

Slug

pie-register-premium

Published

2024-12-02

Title

Pie Register Premium < 3.8.3.3 - Unauthenticated Cross-Site Scripting

Slug

pie-register-premium

Published

2025-02-24

Title

Pie Register Premium < 3.8.3.3 - Missing Authorization

Slug

pie-register-premium

Published

2025-02-24

Title

Pie Register Premium < 3.8.3.3 - Authenticated (Subscriber+) Limited File Deletion

Slug

pie-register-social-site

Published

2024-05-23

Title

Pie Register - Social Sites Login (Add on) < 1.7.8 - Unauthenticated Privilege Escalation

Slug

pie-register-social-site

Published

2024-12-03

Title

Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Social Sites Login < 1.8 - Authentication Bypass via WordPress.com OAuth provider

Slug

Published

2024-01-31

Title

PilotPress < 2.0.31 - Subscriber+ Report Access & DB Transients Purging

Slug

Published

2025-09-22

Title

PilotPress <= 2.0.36 - Authenticated (Contributor+) Stored Cross-Site Scripting

Slug

Published

2025-09-22

Title

PilotPress <= 2.0.36 - Missing Authorization

Slug

Published

2025-04-01

Title

Pin Generator < 2.0.1 - Missing Authorization

Slug

pin-locations-on-map

Published

2025-01-16

Title

Pin Locations on Map <= 1.0 - Reflected Cross-Site Scripting

Slug

Published

2022-02-28

Title

Unauthorised AJAX Calls via Freemius

Slug

Published

2023-07-18

Title

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

Slug

pingmeter-uptime-monitoring

Published

2024-12-20

Title

Pingmeter Uptime Monitoring <= 1.0.3 - Reflected Cross-Site Scripting

Slug

Published

2025-12-30

Title

Pinpoll <= 4.0.0 - Reflected Cross-Site Scripting