WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pjw-mime-config
Published
2024-11-15
Title
PJW Mime Config <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
pkt1-centro-de-envios
Published
2024-12-19
Title
PKT1 Centro de envios < 1.2.2 - Reflected Cross-Site Scripting
Slug
placester
Published
2014-08-01
Title
placester <= 0.3.12 - XSS in ZeroClipboard
Slug
plainview-activity-monitor
Published
2018-08-26
Title
Plainview Activity Monitor < 20180826 - Remote Command Execution (RCE)
Slug
plainview-protect-passwords
Published
2023-11-08
Title
Plainview Protect Passwords <= 1.4 - Reflected XSS
Slug
plainview-protect-passwords
Published
2023-11-08
Title
Plainview Protect Passwords <= 1.4 - Cross-Site Request Forgery
Slug
planaday-api
Published
2024-12-11
Title
Planaday API < 11.5 - Reflected Cross-Site Scripting
Slug
planetcalc
Published
2025-09-29
Title
planetcalc <= 2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via language Parameter
Slug
planning-center-online-giving
Published
2024-11-03
Title
Planning Center Online Giving <= 1.0.0 - Contributor+ XSS via Shortcode
Slug
planso-forms
Published
2021-09-15
Title
PlanSo Forms <= 2.6.3 - Authenticated Stored Cross-Site Scripting
Slug
planyo-online-reservation-system
Published
2025-04-01
Title
Planyo online reservation system <= 3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
planyo-online-reservation-system
Published
2026-07-10
Title
Planyo online reservation system < 3.1 - Unauthenticated Server-Side Request Forgery via 'ulap_url' Parameter
Slug
platformly
Published
2024-11-01
Title
Platform.ly Official < 1.14 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
platformly-for-woocommerce
Published
2025-03-06
Title
Platform.ly for WooCommerce < 1.1.7 - Unauthenticated Blind Server-Side Request Forgery
Slug
platinum-seo-pack
Published
2014-08-01
Title
platinum_seo_pack.php - s Parameter Reflected XSS
Slug
platinum-seo-pack
Published
2024-03-29
Title
Platinum SEO <= 2.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
plationline
Published
2025-06-27
Title
PlatiOnline Payments < 7.0.1 - Missing Authorization
Slug
platnosci-online-blue-media
Published
2026-08-07
Title
Autopay / Blue Media for WooCommerce < 5.0.1 - Unauthenticated Stored XSS via CSS Editor
Slug
platnosci-online-blue-media
Published
2026-08-15
Title
Autopay < 5.0.1 - Unauthenticated Stored Cross-Site Scripting via 'bm_woocommerce_css_editor_content' Parameter
Slug
platnosci-online-blue-media
Published
2026-08-18
Title
Autopay < 5.0.1 - Unauthenticated Stored Cross-Site Scripting
Slug
plausible-analytics
Published
2022-04-07
Title
Plausible Analytics < 1.2.3 - Admin+ Stored Cross-Site Scripting
Slug
plausible-analytics
Published
2022-05-27
Title
Plausible Analytics < 1.2.4 - Subscriber+ Arbitrary Settings Update
Slug
plausible-analytics
Published
2023-08-16
Title
Plausible Analytics < 1.3.4 - Reflected XSS
Slug
play-ht
Published
2024-02-22
Title
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Missing Authorization
Slug
play-ht
Published
2024-02-22
Title
Play.ht – Make Your Blog Posts Accessible With Text to Speech Audio <= 3.6.4 - Cross-Site Request Forgery