WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pdfjs-viewer-shortcode
Published
2024-05-20
Title
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Slug
pdfl-io
Published
2026-04-07
Title
pdfl.io < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'text' Shortcode Attribute
Slug
pdpa-consent
Published
2025-06-19
Title
PDPA Consent for Thailand <= 1.1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
pdpa-thailand
Published
2025-09-22
Title
Designil PDPA Thailand < 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pdq-csv
Published
2023-07-17
Title
PDQ CSV < 2.0.0 - Admin+ Stored Cross-Site Scripting
Slug
pdw-file-browser
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
pdw-file-browser
Published
2014-08-01
Title
PDW File Browser - upload.php Arbitrary File Upload
Slug
pe-easy-slider
Published
2025-09-26
Title
PE Easy Slider <= 1.1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
peacefulqode-elementzplus-widgets
Published
2026-03-20
Title
PQ Addons – Creative Elementor Widgets <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Attributes
Slug
peachpay-for-woocommerce
Published
2024-11-22
Title
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net < 1.113.0 - Reflected Cross-Site Scripting
Slug
peachpay-for-woocommerce
Published
2025-09-09
Title
Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net < 1.117.6 - Authenticated (Contributor+) SQL Injection via order_by Parameter
Slug
peachpay-for-woocommerce
Published
2025-09-03
Title
PeachPay Payments < 1.117.5 - Missing Authorization
Slug
peachpay-for-woocommerce
Published
2026-01-19
Title
PeachPay — Payments & Express Checkout for WooCommerce (supports Stripe, PayPal, Square, Authorize.net) < 1.119.9 - Missing Authorization to Unauthenticated Order Status Modification
Slug
peachpay-for-woocommerce
Published
2026-05-27
Title
PeachPay < 1.120.47 - Cross-Site Request Forgery to Stripe Unlink
Slug
pearl-header-builder
Published
2023-04-19
Title
Pearl < 1.3.5 - CSRF
Slug
pearl-header-builder
Published
2024-04-30
Title
WordPress Header Builder Plugin – Pearl < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
pearl-header-builder
Published
2024-06-11
Title
WordPress Header Builder Plugin – Pearl < 1.3.8 - Missing Authorization to Unauthenticated Arbitrary Site Options Deletion
Slug
pearl-header-builder
Published
2025-01-08
Title
Wordpress Header Builder Plugin < 1.3.9 - Cross-Site Request Forgery to Header Deletion
Slug
pearl-header-builder
Published
2025-04-01
Title
Pearl < 1.3.10 - Cross-Site Request Forgery
Slug
pearl-header-builder
Published
2025-04-01
Title
Pearl < 1.3.10 - Missing Authorization
Slug
pedalo-connector
Published
2024-10-10
Title
Pedalo Connector <= 2.0.5 - Authentication Bypass to Administrator
Slug
peekaboo
Published
2025-04-24
Title
Peekaboo <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
peepso-core
Published
2016-06-29
Title
PeepSo <= 1.6.0 - Authenticated Privilege Escalation
Slug
peepso-core
Published
2023-02-20
Title
Community by PeepSo < 6.0.3.0 - Multiple CSRF
Slug
peepso-core
Published
2023-11-16
Title
Community by PeepSo < 6.2.0.0 - Cross-Site Request Forgery via delete