WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pixobe-cartography
Published
2025-03-19
Title
Pixobe Cartography <= 1.0.1 - Reflected Cross-Site Scripting
Slug
pixproof
Published
2024-12-12
Title
PixProof <= 2.0.1 - Missing Authorization
Slug
pixter-image-digital-license
Published
2025-07-23
Title
Multiple Plugins from itayamar - Supply Chain Compromise
Slug
pixtypes
Published
2023-04-07
Title
PixTypes < 1.4.15 - Cross-Site Request Forgery
Slug
pixtypes
Published
2023-08-11
Title
PixTypes < 1.4.16 - Reflected XSS
Slug
pj-news-ticker
Published
2024-02-12
Title
PJ News Ticker < 1.9.6 - Contributor+ Stored XSS
Slug
pjw-mime-config
Published
2024-11-15
Title
PJW Mime Config <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
pkt1-centro-de-envios
Published
2024-12-19
Title
PKT1 Centro de envios < 1.2.2 - Reflected Cross-Site Scripting
Slug
placester
Published
2014-08-01
Title
placester <= 0.3.12 - XSS in ZeroClipboard
Slug
plainview-activity-monitor
Published
2018-08-26
Title
Plainview Activity Monitor < 20180826 - Remote Command Execution (RCE)
Slug
plainview-protect-passwords
Published
2023-11-08
Title
Plainview Protect Passwords <= 1.4 - Reflected XSS
Slug
plainview-protect-passwords
Published
2023-11-08
Title
Plainview Protect Passwords <= 1.4 - Cross-Site Request Forgery
Slug
planaday-api
Published
2024-12-11
Title
Planaday API < 11.5 - Reflected Cross-Site Scripting
Slug
planetcalc
Published
2025-09-29
Title
planetcalc <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via language Parameter
Slug
planning-center-online-giving
Published
2024-11-03
Title
Planning Center Online Giving <= 1.0.0 - Contributor+ XSS via Shortcode
Slug
planso-forms
Published
2021-09-15
Title
PlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site Scripting
Slug
planyo-online-reservation-system
Published
2025-04-01
Title
Planyo online reservation system <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
planyo-online-reservation-system
Published
2026-07-10
Title
Planyo online reservation system < 3.1 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter
Slug
platformly
Published
2024-11-01
Title
Platform.ly Official < 1.14 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
platformly-for-woocommerce
Published
2025-03-06
Title
Platform.ly for WooCommerce < 1.1.7 - Unauthenticated Blind Server-Side Request Forgery
Slug
platinum-seo-pack
Published
2014-08-01
Title
platinum_seo_pack.php - s Parameter Reflected XSS
Slug
platinum-seo-pack
Published
2024-03-29
Title
Platinum SEO <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
plationline
Published
2025-06-27
Title
PlatiOnline Payments < 7.0.1 - Missing Authorization
Slug
plausible-analytics
Published
2022-04-07
Title
Plausible Analytics < 1.2.3 - Admin+ Stored Cross-Site Scripting
Slug
plausible-analytics
Published
2022-05-27
Title
Plausible Analytics < 1.2.4 - Subscriber+ Arbitrary Settings Update