WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pixelyoursite
Published
2026-10-20
Title
PixelYourSite (Free & Pro) - Unauthenticated Stored XSS via Cookie
Slug
pixelyoursite-pro
Published
2023-05-16
Title
PixelYourSite < 9.3.7 and PixelYourSite Pro < 9.6.2 - Admin+ Stored Cross-Site Scripting
Slug
pixelyoursite-pro
Published
2024-09-03
Title
PixelYourSite – Your smart PIXEL (TAG) & API Manager <= 9.7.1 and PixelYourSite PRO <= 10.4.2 - Unauthenticated Information Exposure and Log Deletion
Slug
pixelyoursite-pro
Published
2026-02-13
Title
PixelYourSite PRO < 12.4.0.3 - Unauthenticated Stored Cross-Site Scripting
Slug
pixelyoursite-pro
Published
2026-05-01
Title
PixelYourSite Pro < 12.5.0.2 - Unauthenticated Blind Server-Side Request Forgery via 'urls[]' Parameter
Slug
pixelyoursite-pro
Published
2026-07-31
Title
PixelYourSite < 11.2.2 and PixelYourSite PRO < 12.6.1 - Unauthenticated Sensitive Information Exposure via Order-Received Endpoint
Slug
pixelyoursite-pro
Published
2026-10-20
Title
PixelYourSite (Free & Pro) - Unauthenticated Stored XSS via Cookie
Slug
pixfields
Published
2023-03-30
Title
PixFields <= 0.7.0 - Contributor+ Stored Cross-Site Scripting
Slug
pixfields
Published
2023-10-16
Title
PixFields < 0.7.1 - Arbitrary Settings Update via CSRF
Slug
pixfort-core
Published
2026-03-02
Title
pixfort Core < 3.2.26 - Missing Authorization
Slug
pixfort-core
Published
2026-03-02
Title
pixfort Core < 3.2.26 - Reflected Cross-Site Scripting
Slug
pixfort-core
Published
2026-09-29
Title
Pixfort Core < 4.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pixmagix
Published
2026-06-29
Title
PixMagix < 1.7.3 - Authenticated (Author+) Path Traversal in 'layers[].id' Parameter
Slug
pixnet
Published
2025-01-06
Title
PIXNET Plugin <= 2.9.10 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
pixobe-cartography
Published
2024-11-28
Title
Pixobe Cartography <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pixobe-cartography
Published
2025-03-19
Title
Pixobe Cartography <= 1.0.1 - Reflected Cross-Site Scripting
Slug
pixproof
Published
2024-12-12
Title
PixProof <= 2.0.1 - Missing Authorization
Slug
pixter-image-digital-license
Published
2025-07-23
Title
Multiple Plugins from itayamar - Supply Chain Compromise
Slug
pixtypes
Published
2023-04-07
Title
PixTypes < 1.4.15 - Cross-Site Request Forgery
Slug
pixtypes
Published
2023-08-11
Title
PixTypes < 1.4.16 - Reflected XSS
Slug
pj-news-ticker
Published
2024-02-12
Title
PJ News Ticker < 1.9.6 - Contributor+ Stored XSS
Slug
pjw-mime-config
Published
2024-11-15
Title
PJW Mime Config <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
pkt1-centro-de-envios
Published
2024-12-19
Title
PKT1 Centro de envios < 1.2.2 - Reflected Cross-Site Scripting
Slug
placester
Published
2014-08-01
Title
placester <= 0.3.12 - XSS in ZeroClipboard
Slug
plainview-activity-monitor
Published
2018-08-26
Title
Plainview Activity Monitor < 20180826 - Remote Command Execution (RCE)