WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
phpfreechat
Published
2014-08-01
Title
PHPFreeChat 0.2.8 - lib/csstidy-1.2/css_optimiser.php url Parameter XSS
Slug
phpinfo-wp
Published
2024-06-19
Title
phpinfo() WP < 6.0 - Unauthenticated Information Exposure
Slug
phplist-form-integration
Published
2025-02-13
Title
WP PHPList <= 1.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
phpls
Published
2025-09-10
Title
PhpList Subber <= 1.1 - Cross-Site Request Forgery
Slug
phppoet-checkout-fields
Published
2024-02-14
Title
WooCommerce Easy Checkout Field Editor, Fees & Discounts < 3.5.13 - Unauthenticated Arbitrary File Upload
Slug
phpsword-favicon-manager
Published
2024-05-06
Title
Pk Favicon Manager <=2.1 - Authenticated (Admin+) Arbitrary File Upload
Slug
phraseanet-client
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
phzoom
Published
2024-12-12
Title
phZoom <= 1.2.92 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
pi-woocommerce-order-date-time-and-type
Published
2023-06-26
Title
Order date time for WooCommerce < 3.0.20 - Admin+ Stored XSS
Slug
pica-photo-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
pica-photo-gallery
Published
2014-08-01
Title
Pica Photo Gallery - Arbitrary File Upload
Slug
pica-photo-gallery
Published
2014-08-01
Title
PICA Photo Gallery - Remote File Disclosure
Slug
pickup-and-delivery-from-customer-locations-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
pickup-and-delivery-from-customer-locations-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pico
Published
2025-12-04
Title
Hype <= 1.0.5 - Missing Authorization
Slug
picsmize
Published
2024-11-11
Title
Picsmize <= 1.0.0 - Unauthenticated Arbitrary File Upload
Slug
pictobrowser-gallery
Published
2014-12-18
Title
Pictobrowser Gallery <= 0.3.1 - Multiple CSRF
Slug
pictpress
Published
2014-08-01
Title
PictPress <= 0.91 - Remote File Disclosure
Slug
picture-gallery
Published
2021-08-10
Title
Picture Gallery < 1.4.4 - Authenticated Stored XSS
Slug
picture-gallery
Published
2024-05-14
Title
Picture Gallery < 1.5.12 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
picture-gallery
Published
2025-01-21
Title
Picture Gallery – Frontend Image Uploads, AJAX Photo List < 1.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
picture-gallery
Published
2025-01-17
Title
Picture Gallery – Frontend Image Uploads, AJAX Photo List < 1.5.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via videowhisper_picture_upload_guest Shortcode
Slug
picture-gallery
Published
2025-03-12
Title
Picture Gallery < 1.6.4 - Unauthenticated Stored XSS
Slug
picture-gallery
Published
2026-07-20
Title
Picture Gallery – Frontend Image Uploads, AJAX Photo List < 1.6.6 - Authenticated (Contributor+) Arbitrary File Deletion
Slug
picturesurf-gallery
Published
2014-08-01
Title
Picturesurf Gallery 1.2 - upload.php Arbitrary File Upload