WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ppv-live-webcams
Published
2025-10-16
Title
Paid Videochat Turnkey Site < 7.3.24 - Admin+ Remote Code Execution
Slug
ppv-live-webcams
Published
2026-03-06
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.3.21 - Authenticated (Author+) Privilege Escalation
Slug
ppv-live-webcams
Published
2026-05-26
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.3.24 - Missing Authorization
Slug
ppv-live-webcams
Published
2026-05-28
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.3.24 - Unauthenticated PHP Object Injection
Slug
ppv-live-webcams
Published
2026-06-29
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.4.9 - Authenticated (Performer+) Arbitrary File Deletion
Slug
ppv-live-webcams
Published
2026-10-12
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.5.14 - Missing Authorization
Slug
ppv-live-webcams
Published
2026-10-12
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.5.13 - Missing Authorization
Slug
ppv-live-webcams
Published
2026-10-12
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.5.13 - Missing Authorization
Slug
ppv-live-webcams
Published
2026-10-12
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.5.13 - Unauthenticated Stored Cross-Site Scripting
Slug
ppv-live-webcams
Published
2026-10-19
Title
Paid Videochat Turnkey Site – HTML5 PPV Live Webcams < 7.5.15 - Reflected Cross-Site Scripting
Slug
prague-plugins
Published
2026-01-27
Title
Prague < 2.2.9 - Unauthenticated Stored Cross-Site Scripting
Slug
prague-plugins
Published
2026-01-27
Title
Prague < 2.2.9 - Reflected Cross-Site Scripting
Slug
pramadillo-activecampaign-email-preference-center
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
pramadillo-activecampaign-email-preference-center
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
pray-for-me
Published
2024-05-24
Title
Pray For Me <= 1.0.4 - Settings Update via CSRF
Slug
pray-for-me
Published
2024-05-24
Title
Pray For Me <= 1.0.4 - Unauthenticated Stored XSS
Slug
prayer-times-anywhere
Published
2025-01-07
Title
Prayer Times Anywhere <= 2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
prdctfltr
Published
2021-09-20
Title
Multiple WooCommerce Add-Ons - Low Priv Arbitrary Blog Options Update/Access/Deletion & Plugin's Settings Update/Export/Import
Slug
prdctfltr
Published
2026-02-05
Title
Product Filter for WooCommerce <= 9.1.2 - Shop Manager+ Privilege Escalation
Slug
pre-orders-for-woocommerce
Published
2023-10-26
Title
Pre-Orders for WooCommerce < 1.2.14 - Contributor+ Stored XSS
Slug
pre-orders-for-woocommerce
Published
2026-09-03
Title
Pre-Orders for WooCommerce <= 2.3.1 - Missing Authorization
Slug
pre-party-browser-hints
Published
2023-12-21
Title
Pre* Party Resource Hints < 1.8.20 - Admin+ SQLi
Slug
pre-party-browser-hints
Published
2026-03-20
Title
Pre* Party Resource Hints <= 1.8.20 - Authenticated (Subscriber+) SQL Injection via 'hint_ids' Parameter
Slug
pre-publish-checklist
Published
2023-09-22
Title
Pre-Publish Checklist < 1.1.2 - Insecure Direct Object Reference to Arbitrary Post '_ppc_meta_key' Update
Slug
pre-publish-post-checklist
Published
2025-06-27
Title
Pre-Publish Post Checklist <= 3.1 - Missing Authorization