WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
print-science-designer
Published
2025-04-24
Title
Print Science Designer <= 1.3.155 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
printcart-integration
Published
2025-05-16
Title
Printcart Web to Print Product Designer for WooCommerce < 2.4.0 - Unauthenticated Arbitrary File Upload
Slug
printcart-integration
Published
2025-05-16
Title
Printcart Web to Print Product Designer for WooCommerce < 2.4.1 - Unauthenticated SQL Injection
Slug
printcart-integration
Published
2025-07-03
Title
Printcart Web to Print Product Designer for WooCommerce < 2.4.1 - Subscriber+ SQLi
Slug
printcart-integration
Published
2025-09-22
Title
Printcart Web to Print Product Designer for WooCommerce <= 2.4.7 - Missing Authorization
Slug
printfriendly
Published
2022-05-30
Title
Print, PDF, Email by PrintFriendly < 5.2.3 - Admin+ Stored Cross-Site Scripting
Slug
printfriendly
Published
2023-10-12
Title
Print, PDF, Email by PrintFriendly < 5.5.2 - Admin+ Stored XSS
Slug
printful-shipping-for-woocommerce
Published
2026-02-18
Title
Printful Integration for WooCommerce < 2.2.12 - Authenticated (Contributor+) Server-Side Request Forgery
Slug
printus-cloud-printing-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
printus-cloud-printing-for-woocommerce
Published
2025-04-01
Title
Printus < 1.2.7 - Missing Authorization
Slug
pripre
Published
2024-10-25
Title
PriPre <= 0.4.11 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
prismatic
Published
2021-06-21
Title
Prismatic < 2.8 - Reflected Cross-Site Scripting (XSS)
Slug
prismatic
Published
2021-06-21
Title
Prismatic < 2.8 - Contributor+ Stored XSS
Slug
private-comment
Published
2026-02-17
Title
Private Comment < 0.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via Label Text Setting
Slug
private-content
Published
2023-01-30
Title
PrivateContent < 8.4.4 - Brute Force Protection Bypass
Slug
private-content
Published
2025-02-24
Title
Private Content <= 8.11.5 - Unauthenticated Privilege Escalation via Account Takeover
Slug
private-content
Published
2025-02-24
Title
Private Content <= 8.11.5 - Authenticated (Subscriber+) SQL Injection
Slug
private-content
Published
2025-02-24
Title
Private Content <= 8.11.5 - Missing Authorization
Slug
private-content
Published
2025-02-24
Title
Private Content <= 8.11.5 - Reflected Cross-Site Scripting
Slug
private-content-mail-actions
Published
2025-07-01
Title
PrivateContent - Mail Actions <= 2.3.2 - Unauthenticated Local File Inclusion
Slug
private-files
Published
2022-05-23
Title
Private Files <= 0.40 - Protection Disabling via CSRF
Slug
private-google-calendars
Published
2024-01-03
Title
Private Google Calendars < 20240106 - Contributor+ Stored XSS
Slug
private-google-calendars
Published
2025-11-10
Title
Private Google Calendars < 20251128 - Missing Authorization to Authenticated (Subscriber+) Settings Reset
Slug
private-messages-for-wordpress
Published
2022-05-25
Title
Private Messages For WordPress <= 2.1.10 - Subscriber+ Stored Cross-Site Scripting
Slug
private-messages-for-wordpress
Published
2022-05-25
Title
Private Messages For WordPress <= 2.1.10 - Arbitrary Message Sent via CSRF