WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
printcart-integration
Published
2025-09-22
Title
Printcart Web to Print Product Designer for WooCommerce < 2.13.3 - Missing Authorization
Slug
printcart-integration
Published
2026-06-04
Title
Printcart Web to Print Product Designer for WooCommerce < 2.5.2 - Unauthenticated Folder Content Disclosure via Path Traversal
Slug
printcart-integration
Published
2026-07-02
Title
Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Deletion
Slug
printcart-integration
Published
2026-07-06
Title
Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery
Slug
printcart-integration
Published
2026-09-17
Title
Printcart Web to Print Product Designer for WooCommerce < 2.8.6 - Unauthenticated Arbitrary File Read via 'folder' and 'mockups' Parameters
Slug
printcart-integration
Published
2026-10-13
Title
Printcart Store - Web to Print Product Designer for WooCommerce (PCDesigner) < 2.9.2 - Unauthenticated Arbitrary File Upload to Remote Code Execution via nbdesigner_copy_image_from_url
Slug
printfriendly
Published
2022-05-30
Title
Print, PDF, Email by PrintFriendly < 5.2.3 - Admin+ Stored Cross-Site Scripting
Slug
printfriendly
Published
2023-10-12
Title
Print, PDF, Email by PrintFriendly < 5.5.2 - Admin+ Stored XSS
Slug
printfriendly
Published
2026-07-10
Title
Print, PDF, Email by PrintFriendly < 5.5.11 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'content_position_css' Parameter
Slug
printful-shipping-for-woocommerce
Published
2026-02-18
Title
Printful Integration for WooCommerce < 2.2.12 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
printus-cloud-printing-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
printus-cloud-printing-for-woocommerce
Published
2025-04-01
Title
Printus < 1.2.7 - Missing Authorization
Slug
pripre
Published
2024-10-25
Title
PriPre <= 0.4.11 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
prismatic
Published
2021-06-21
Title
Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS)
Slug
prismatic
Published
2021-06-21
Title
Prismatic < 2.8 - Contributor+ Stored XSS
Slug
prismatic
Published
2026-04-15
Title
Prismatic < 3.7.4 - Unauthenticated Stored Cross-Site Scripting via 'prismatic_encoded' Pseudo-Shortcode
Slug
private-comment
Published
2026-02-17
Title
Private Comment < 0.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via Label Text Setting
Slug
private-content
Published
2023-01-30
Title
PrivateContent < 8.4.4 - Brute Force Protection Bypass
Slug
private-content
Published
2025-02-24
Title
Private Content <= 8.11.5 - Unauthenticated Privilege Escalation via Account Takeover
Slug
private-content
Published
2025-02-24
Title
Private Content <= 8.11.5 - Authenticated (Subscriber+) SQL Injection
Slug
private-content
Published
2025-02-24
Title
Private Content <= 8.11.5 - Missing Authorization
Slug
private-content
Published
2025-02-24
Title
Private Content <= 8.11.5 - Reflected Cross-Site Scripting
Slug
private-content
Published
2026-07-01
Title
Private Content < 9.10.0 - Unauthenticated Privilege Escalation
Slug
private-content-mail-actions
Published
2025-07-01
Title
PrivateContent - Mail Actions <= 2.3.2 - Unauthenticated Local File Inclusion
Slug
private-feed-key
Published
2026-09-15
Title
Private Feed Key <= 0.1 - Unauthenticated Authentication Bypass via 'feedkey' Parameter