WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
piotnetforms
Published
2023-12-27
Title
Piotnet Forms < 1.0.30 - Missing Authorization via multiple AJAX actions
Slug
piotnetforms
Published
2025-04-01
Title
Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
piotnetforms
Published
2025-04-01
Title
Piotnet Forms <= 1.0.30 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
piotnetforms
Published
2025-04-07
Title
Piotnet Forms <= 1.0.30 - Authenticated (Editor+) Path Traversal
Slug
piotnetforms
Published
2025-09-22
Title
Piotnet Forms <= 1.0.30 - Cross-Site Request Forgery
Slug
piotnetforms-pro
Published
2026-05-18
Title
Piotnet Forms <= 2.1.40 - Unauthenticated Arbitrary File Upload via Form File Upload
Slug
pipdisqus
Published
2025-03-11
Title
pipDisqus < 1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
pirate-forms
Published
2019-07-27
Title
Pirate Forms < 2.5.2 - HTML Injection & CSRF
Slug
pirate-forms
Published
2025-01-29
Title
Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.1 - Unauthenticated Arbitrary Shortcode Execution
Slug
pirate-forms
Published
2025-03-03
Title
Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS
Slug
pirate-forms
Published
2025-03-03
Title
Contact Form & SMTP Plugin for WordPress by PirateForms < 2.6.0 - Admin+ Stored XSS
Slug
pit-login-welcome
Published
2025-01-16
Title
Pit Login Welcome <= 1.1.5 - Reflected Cross-Site Scripting
Slug
pitchprint
Published
2026-03-10
Title
PitchPrint < 11.2.0 - Unauthenticated Arbitrary File Deletion
Slug
piwigopress
Published
2025-02-24
Title
PiwigoPress <= 2.33 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pixabay-images
Published
2015-02-04
Title
Pixabay Images <= 2.3 - Multiple Vulnerabilities (RCE, XSS, ...)
Slug
pixabay-images
Published
2025-06-17
Title
Pixabay Images <= 3.4 - Authenticated (Author+) Arbitrary File Upload
Slug
pixcodes
Published
2023-01-03
Title
PixCodes < 2.3.7 - Contributor+ Stored XSS in Shortcode
Slug
pixel-cost-of-goods
Published
2026-05-19
Title
Cost of Goods by PixelYourSite < 1.2.13 - Unauthenticated Stored Cross-Site Scripting via Cost of Goods Import
Slug
pixel-for-web-stories
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
pixel-formbuilder
Published
2025-05-16
Title
Pixel WordPress Form BuilderPlugin & Autoresponder < 1.0.4 - Cross-Site Request Forgery
Slug
pixel-formbuilder
Published
2025-05-22
Title
Pixel WordPress Form BuilderPlugin & Autoresponder < 1.0.3 - Unauthenticated SQL Injection
Slug
pixel-gallery
Published
2025-07-21
Title
Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery < 1.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pixel-manager-for-woocommerce
Published
2026-07-20
Title
Pixel Manager for WooCommerce < 2.2.1 - Unauthenticated Forged Conversion Event Submission
Slug
pixelating-image-slideshow-gallery
Published
2025-07-04
Title
Pixelating image slideshow gallery <= 8.0 - Authenticated (Contributor+) SQL Injection
Slug
pixelavo
Published
2026-07-20
Title
Pixelavo < 1.5.4 - Unauthenticated Facebook CAPI Event Injection via pixelavo_event AJAX