WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
paid-memberships-pro
Published
2020-09-16
Title
Paid Memberships Pro < 2.4.3 - Arbitrary Settings Update via CSRF
Slug
paid-memberships-pro
Published
2023-11-16
Title
Paid Memberships Pro < 2.12.4 - Subscriber+ Arbitrary File Upload
Slug
paid-memberships-pro
Published
2023-12-21
Title
Paid Memberships Pro < 2.12.6 - Missing Authorization via API
Slug
paid-memberships-pro
Published
2024-01-24
Title
Paid Memberships Pro < 2.12.8 - Cross-Site Request Forgery
Slug
paid-memberships-pro
Published
2024-02-16
Title
Paid Memberships Pro < 2.12.9 - Contributor+ Arbitrary User Custom Field Disclosure
Slug
paid-memberships-pro
Published
2024-01-12
Title
Paid Memberships Pro < 2.12.7 - Information Exposure in Debug Logs
Slug
paid-memberships-pro
Published
2024-03-25
Title
Paid Memberships Pro < 3.0 - Cross-Site Request Forgery
Slug
paid-memberships-pro
Published
2024-04-15
Title
Paid Memberships Pro < 3.0.2 - Cross-Site Request Forgery
Slug
paid-memberships-pro
Published
2024-06-18
Title
Paid Memberships Pro < 3.0 - Cross-Site Request Forgery to Membership Modification
Slug
paid-memberships-pro
Published
2024-06-28
Title
Paid Memberships Pro < 3.0.5 - Unauthenticated Insecure Direct Object Reference to Order Status Update
Slug
paid-memberships-pro
Published
2024-07-04
Title
Paid Memberships Pro < 3.0.6 - Authenticated (Administrator+) SQL Injection
Slug
pakke
Published
2025-07-08
Title
Pakke Envíos <= 1.0.2 - Authenticated (Subscriber+) SQL Injection
Slug
pakkelabels-for-woocommerce
Published
2025-03-28
Title
Shipmondo – A complete shipping solution for WooCommerce < 5.0.4 - Missing Authorization to Authenticated (Customer+) Information Disclosure
Slug
pallet-packaging-for-woocommerce
Published
2025-02-12
Title
Pallet Packaging for WooCommerce < 1.1.16 - Missing Authorization
Slug
panda-pods-repeater-field
Published
2022-12-07
Title
Panda Pods Repeater Field < 1.5.4 - Reflected XSS
Slug
panda-pods-repeater-field
Published
2026-02-17
Title
Panda Pods Repeater Field <= 1.5.12 - Missing Authorization
Slug
pandavideo
Published
2024-07-08
Title
Panda Video < 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pandavideo
Published
2024-07-08
Title
Panda Video < 1.4.1 - Authenticated (Contributor+) Local File Inclusion
Slug
panorama
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
panorama
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
papercite
Published
2025-01-16
Title
PAPERCITE <= 0.5.18 - Missing Authorization
Slug
parallax-image
Published
2023-11-20
Title
Parallax Image < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
parallax-image
Published
2024-10-16
Title
Parallax Image < 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via dd-parallax Shortcode
Slug
parallax-image
Published
2024-11-18
Title
Parallax Image < 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via position Parameter
Slug
parallax-scrolling-enllax-js
Published
2025-09-05
Title
Parallax Scrolling Enllax.js <= 0.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting