WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-pagseguro-payments
Published
2024-11-08
Title
WP PagSeguro Payments <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-pano
Published
2025-01-14
Title
wp-pano <= 1.17 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-panoramio
Published
2025-01-22
Title
WP Panoramio <= 1.5.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-parallax-content-slider
Published
2025-03-24
Title
WP Parallax Content Slider <= 0.9.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-parsidate
Published
2023-01-23
Title
Parsi Date < 4.0.2 - Reflected Cross-Site Scripting
Slug
wp-parsidate
Published
2024-11-25
Title
Parsi Date < 5.1.2 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
wp-parsidate
Published
2026-09-24
Title
Parsi Date < 6.4 - Unauthenticated Stored XSS
Slug
wp-partner
Published
2026-10-09
Title
WP-Partner <= 1.2.1 - Unauthenticated SQLi via 'id' Parameter
Slug
wp-payeezy-pay
Published
2018-12-07
Title
WP Payeezy Pay < 2.98 - Local File Inclusion
Slug
wp-payment-form
Published
2022-08-10
Title
Best Payments Plugin for WP < 4.2.1 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-payment-form
Published
2022-08-10
Title
Best Payments Plugin for WP < 4.2.1 - Reflected Cross-Site Scripting
Slug
wp-payment-form
Published
2026-04-29
Title
Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management < 4.6.20 - Missing Authorization
Slug
wp-payment-form
Published
2026-09-24
Title
Paymattic < 4.6.26 - Unauthenticated Payment Bypass via Unbound Stripe PaymentIntent
Slug
wp-payment-form
Published
2026-10-12
Title
Paymattic – Secure, Simple Payment & Donation with Subscription Payments, Recurring Donations, Customer Management < 4.6.28 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-paypal
Published
2025-01-16
Title
Payment Button for PayPal < 1.2.3.36 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-paypal
Published
2026-01-16
Title
Payment Button for PayPal < 1.2.3.42 - Missing Authorization to Unauthenticated Arbitrary Order Creation
Slug
wp-paypal
Published
2026-08-05
Title
Payment Button for PayPal < 1.2.3.45 - Unauthenticated Payment Price Manipulation
Slug
wp-paytm-pay
Published
2021-07-24
Title
Paytm - Donation Plugin <= 1.3.2 - Authenticated (admin+) SQL Injection
Slug
wp-pdf-generator
Published
2023-07-17
Title
WP PDF Generator < 1.2.3 - Cross-Site Request Forgery
Slug
wp-perfect-plugin
Published
2024-11-01
Title
W3P SEO < 1.8.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-performance-pack
Published
2025-03-11
Title
WP Performance Pack < 2.5.4 - Missing Authorization
Slug
wp-performance-pack
Published
2025-04-09
Title
WP Performance Pack <= 2.5.4 - Cross-Site Request Forgery
Slug
wp-performance-score-booster
Published
2021-10-18
Title
WP Performance Score Booster < 2.1 - Settings Change via CSRF
Slug
wp-permalink-translator
Published
2025-06-27
Title
WP Permalink Translator <= 1.7.6 - Cross-Site Request Forgery
Slug
wp-persistent-login
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius