WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
persian-woocommerce-shipping
Published
2025-03-27
Title
persian-woocommerce-shipping < 4.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
persian-woocommerce-sms
Published
2016-04-21
Title
Persian Woocommerce SMS <= 3.3.3 - Reflected Cross-Site Scripting (XSS)
Slug
persian-woocommerce-sms
Published
2024-10-16
Title
Persian WooCommerce SMS < 7.0.3 - Reflected Cross-Site Scripting
Slug
persian-woocommerce-sms
Published
2024-12-06
Title
افزونه پیامک ووکامرس Persian WooCommerce SMS < 7.0.6 - Reflected Cross-Site Scripting
Slug
persian-woocommerce-sms
Published
2024-12-11
Title
Persian Woocommerce SMS < 7.0.6 - Reflected Cross-Site Scripting
Slug
persian-woocommerce-sms
Published
2025-06-05
Title
Persian Woocommerce SMS < 7.1.0 - Authenticated (Shop manager+) SQL Injection
Slug
persian-woocommerce-sms
Published
2026-02-11
Title
Persian Woocommerce SMS <= 7.1.1 - Reflected Cross-Site Scripting
Slug
personal-authors-category
Published
2026-02-13
Title
personal-authors-category <= 0.3 - Reflected Cross-Site Scripting
Slug
personal-dictionary
Published
2022-04-18
Title
Personal Dictionary < 1.3.4 - Unauthenticated SQLi
Slug
personal-favicon
Published
2025-06-05
Title
Personal Favicon <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
personalization-by-flowcraft
Published
2024-11-13
Title
Advanced Personalization <= 1.1.2 - Unauthenticated PHP Object Injection
Slug
personalize-woocommerce-cart-page
Published
2019-06-19
Title
Personalized WooCommerce Cart Page <= 2.4 - Cross-Site Request Forgery (CSRF)
Slug
personalize-woocommerce-cart-page
Published
2025-01-24
Title
GoHero Store Customizer for WooCommerce < 4.0 - Missing Authorization to Unuthenticated Settings Update
Slug
personizely
Published
2025-05-02
Title
Personizely < 0.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via widgetId Parameter
Slug
pesapal-for-woocommerce
Published
2025-03-27
Title
Pesapal Gateway for Woocommerce <= 2.1.0 - Reflected Cross-Site Scripting
Slug
pet-manager
Published
2024-05-02
Title
Pet Manager <= 1.4 - Contributor+ Stored XSS
Slug
pet-manager
Published
2024-05-02
Title
Pet Manager <= 1.4 - Reflected XSS
Slug
peters-collaboration-e-mails
Published
2022-05-23
Title
Peter’s Collaboration E-mails <= 2.2.0 - Arbitrary Settings Update via CSRF
Slug
peters-custom-anti-spam-image
Published
2023-10-12
Title
Peter’s Custom Anti-Spam < 3.2.3 - Reflected XSS
Slug
peters-custom-anti-spam-image
Published
2024-12-17
Title
Peter’s Custom Anti-Spam < 3.2.4 - Cross-Site Request Forgery via cas_register_post Function
Slug
peters-date-countdown
Published
2026-02-04
Title
Peter's Date Countdown < 2.0.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
peters-login-redirect
Published
2016-08-15
Title
Peter's Login Redirect <= 2.9.0 - Cross-Site Scripting (XSS) & CSRF
Slug
peters-login-redirect
Published
2019-02-23
Title
Peters Login Redirect <= 2.9.1 - Multiple CSRF
Slug
peters-login-redirect
Published
2021-11-08
Title
LoginWP < 3.0.0.5 - Reflected Cross-Site Scripting
Slug
petfinder-listings
Published
2022-02-21
Title
Petfinder Listings < 1.1 - Admin+ Stored Cross-Site Scripting