WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
peters-collaboration-e-mails
Published
2022-05-23
Title
Peter’s Collaboration E-mails <= 2.2.0 - Arbitrary Settings Update via CSRF
Slug
peters-custom-anti-spam-image
Published
2023-10-12
Title
Peter’s Custom Anti-Spam < 3.2.3 - Reflected XSS
Slug
peters-custom-anti-spam-image
Published
2024-12-17
Title
Peter’s Custom Anti-Spam < 3.2.4 - Cross-Site Request Forgery via cas_register_post Function
Slug
peters-date-countdown
Published
2026-02-04
Title
Peter's Date Countdown < 2.0.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
peters-login-redirect
Published
2016-08-15
Title
Peter's Login Redirect <= 2.9.0 - Cross-Site Scripting (XSS) & CSRF
Slug
peters-login-redirect
Published
2019-02-23
Title
Peters Login Redirect <= 2.9.1 - Multiple CSRF
Slug
peters-login-redirect
Published
2021-11-08
Title
LoginWP < 3.0.0.5 - Reflected Cross-Site Scripting
Slug
petfinder-listings
Published
2022-02-21
Title
Petfinder Listings < 1.1 - Admin+ Stored Cross-Site Scripting
Slug
petitioner
Published
2026-03-27
Title
Petitioner < 0.7.4 - Missing Authorization
Slug
petje-af
Published
2026-04-14
Title
Petje.af <= 2.1.8 - Cross-Site Request Forgery to Account Deletion via 'petjeaf_disconnect' AJAX Action
Slug
pets
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
pets
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pets
Published
2025-08-06
Title
Pets <= 1.4.1 - Reflected Cross-Site Scripting
Slug
pf-timer
Published
2024-11-08
Title
PF Timer <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pgall-for-woocommerce
Published
2024-11-22
Title
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 < 5.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting pafw_instant_payment Shortcode
Slug
pgall-for-woocommerce
Published
2024-12-06
Title
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 < 5.2.3 - Reflected Cross-Site Scripting via add_query_arg Function
Slug
pgall-for-woocommerce
Published
2025-01-03
Title
워드프레스 결제 심플페이 < 5.2.2 - Authenticated (Contributor+) Local File Inclusion
Slug
pgall-for-woocommerce
Published
2025-05-07
Title
워드프레스 결제 심플페이 < 5.3.3 - Cross-Site Request Forgery
Slug
pgall-for-woocommerce
Published
2026-06-23
Title
워드프레스 결제 심플페이 – 우커머스 결제 플러그인 < 5.5.7 - Unauthenticated SQL Injection
Slug
pgs-core
Published
2025-05-06
Title
PGS Core < 5.9.0 - Unauthenticated PHP Object Injection
Slug
pgs-core
Published
2025-05-06
Title
PGS Core < 5.9.0 - Missing Authorization via Multiple Functions
Slug
pgs-core
Published
2025-05-06
Title
PGS Core < 5.9.0 - Unauthenticated SQL Injection
Slug
pgs-core
Published
2025-09-26
Title
PGS Core <= 5.9.0 - Authenticated (Contributor+) SQL Injection
Slug
phastpress
Published
2021-03-19
Title
PhastPress < 1.111 - Open Redirect
Slug
phastpress
Published
2025-12-22
Title
PhastPress < 3.8 - Unauthenticated Arbitrary File Read via Null Byte Injection