WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pixfields
Published
2023-03-30
Title
PixFields <= 0.7.0 - Contributor+ Stored Cross-Site Scripting
Slug
pixfields
Published
2023-10-16
Title
PixFields < 0.7.1 - Arbitrary Settings Update via CSRF
Slug
pixfort-core
Published
2026-03-02
Title
pixfort Core < 3.2.26 - Missing Authorization
Slug
pixfort-core
Published
2026-03-02
Title
pixfort Core < 3.2.26 - Reflected Cross-Site Scripting
Slug
pixnet
Published
2025-01-06
Title
PIXNET Plugin <= 2.9.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
pixobe-cartography
Published
2024-11-28
Title
Pixobe Cartography <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pixobe-cartography
Published
2025-03-19
Title
Pixobe Cartography <= 1.0.1 - Reflected Cross-Site Scripting
Slug
pixproof
Published
2024-12-12
Title
PixProof <= 2.0.1 - Missing Authorization
Slug
pixter-image-digital-license
Published
2025-07-23
Title
Multiple Plugins from itayamar - Supply Chain Compromise
Slug
pixtypes
Published
2023-04-07
Title
PixTypes < 1.4.15 - Cross-Site Request Forgery
Slug
pixtypes
Published
2023-08-11
Title
PixTypes < 1.4.16 - Reflected XSS
Slug
pj-news-ticker
Published
2024-02-12
Title
PJ News Ticker < 1.9.6 - Contributor+ Stored XSS
Slug
pjw-mime-config
Published
2024-11-15
Title
PJW Mime Config <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
pkt1-centro-de-envios
Published
2024-12-19
Title
PKT1 Centro de envios < 1.2.2 - Reflected Cross-Site Scripting
Slug
placester
Published
2014-08-01
Title
placester <= 0.3.12 - XSS in ZeroClipboard
Slug
plainview-activity-monitor
Published
2018-08-26
Title
Plainview Activity Monitor < 20180826 - Remote Command Execution (RCE)
Slug
plainview-protect-passwords
Published
2023-11-08
Title
Plainview Protect Passwords <= 1.4 - Reflected XSS
Slug
plainview-protect-passwords
Published
2023-11-08
Title
Plainview Protect Passwords <= 1.4 - Cross-Site Request Forgery
Slug
planaday-api
Published
2024-12-11
Title
Planaday API < 11.5 - Reflected Cross-Site Scripting
Slug
planetcalc
Published
2025-09-29
Title
planetcalc <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via language Parameter
Slug
planning-center-online-giving
Published
2024-11-03
Title
Planning Center Online Giving <= 1.0.0 - Contributor+ XSS via Shortcode
Slug
planso-forms
Published
2021-09-15
Title
PlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site Scripting
Slug
planyo-online-reservation-system
Published
2025-04-01
Title
Planyo online reservation system <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
platformly
Published
2024-11-01
Title
Platform.ly Official < 1.14 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
platformly-for-woocommerce
Published
2025-03-06
Title
Platform.ly for WooCommerce < 1.1.7 - Unauthenticated Blind Server-Side Request Forgery