WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
push-notifications-for-wp
Published
2021-11-16
Title
Push Notifications for WordPress (Lite) < 6.0.1 - Settings Update via CSRF
Slug
pushbiz
Published
2025-02-04
Title
Pushbiz <= 1.0 - Reflected XSS
Slug
pushe-webpush
Published
2025-09-05
Title
Pushe Web Push Notification <= 0.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
pushengage
Published
2026-06-10
Title
PushEngage – Web Push Notifications, WooCommerce Automation & Chat Widget < 4.2.4 - Authenticated (Subscriber+) Information Exposure
Slug
puzzleme
Published
2025-09-03
Title
PuzzleMe for WordPress < 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pvn-auth-popup
Published
2024-06-05
Title
PVN Auth Popup <= 1.0.0 - Admin+ Stored XSS
Slug
pvn-auth-popup
Published
2024-06-05
Title
PVN Auth Popup <= 1.0.0 - Contributor+ XSS via Shortcode
Slug
pw-bulk-edit
Published
2025-05-07
Title
PW WooCommerce Bulk Edit < 2.135 - Cross-Site Request Forgery
Slug
pw-woocommerce-on-sale
Published
2025-07-07
Title
PW WooCommerce On Sale! < 1.40 - Missing Authorization
Slug
pwa-for-wp
Published
2019-03-25
Title
PWA for WP <= 1.0.8 - XSS
Slug
pwa-for-wp
Published
2021-07-01
Title
PWA for WP & AMP < 1.7.33 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
pwa-for-wp
Published
2021-07-01
Title
PWA for WP & AMP < 1.7.33 - Authenticated (Subscriber+) Settings Change
Slug
pwa-for-wp
Published
2024-07-03
Title
PWA For WP & AMP < 1.7.72 Administrator+ Stored XSS
Slug
pwa-for-wp
Published
2024-09-25
Title
PWA for WP & AMP < 1.7.73 - Missing Authorization
Slug
pwgrandom
Published
2014-12-09
Title
PWG R&om <= 1.11 - CSRF & XSS
Slug
pymntpl-paypal-woocommerce
Published
2026-02-14
Title
Payment Plugins for PayPal WooCommerce < 2.0.14 - Missing Authorization
Slug
pymntpl-paypal-woocommerce
Published
2026-07-06
Title
Payment Plugins for PayPal WooCommerce < 2.0.20 - Unauthenticated Payment Bypass via Reuse of a Completed PayPal Order
Slug
pymntpl-paypal-woocommerce
Published
2026-09-07
Title
Payment Plugins for PayPal WooCommerce < 2.0.26 - Subscriber+ Stored Payment Method Assignment via IDOR
Slug
pymntpl-paypal-woocommerce
Published
2026-09-07
Title
Payment Plugins for PayPal WooCommerce < 2.0.26 - Unauthenticated Customer PII Disclosure via order-pay
Slug
pymntpl-paypal-woocommerce
Published
2026-09-21
Title
Payment Plugins for PayPal WooCommerce < 2.0.27 - Unauthenticated Payment Hijacking via Unvalidated PayPal Order ID
Slug
pz-frontend-manager
Published
2024-07-01
Title
pz-frontend-manager < 1.0.6 - CSRF change user profile picture
Slug
pz-frontend-manager
Published
2026-04-07
Title
PZ Frontend Manager <= 1.0.6 - Missing Authorization to Arbitrary User Deletion via 'dataType' Parameter
Slug
pz-linkcard
Published
2022-03-01
Title
Pz-LinkCard < 2.4.5.3 - Reflected Cross-Site Scripting
Slug
pz-linkcard
Published
2023-11-14
Title
Pz-LinkCard < 2.5.3 - Caching Management via CSRF
Slug
pz-linkcard
Published
2024-03-07
Title
Pz-LinkCard < 2.5.3 - Contributor+ SSRF