WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
panda-pods-repeater-field
Published
2022-12-07
Title
Panda Pods Repeater Field < 1.5.4 - Reflected XSS
Slug
panda-pods-repeater-field
Published
2026-02-17
Title
Panda Pods Repeater Field < 1.5.13 - Missing Authorization
Slug
pandavideo
Published
2024-07-08
Title
Panda Video < 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
pandavideo
Published
2024-07-08
Title
Panda Video < 1.4.1 - Authenticated (Contributor+) Local File Inclusion
Slug
panorama
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
panorama
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
panorama
Published
2026-06-26
Title
Panorama – 360 degree Virtual Tour, Panoramic Image viewer and More < 1.7.0 - Authenticated (Contributor+) Local File Inclusion
Slug
papercite
Published
2025-01-16
Title
PAPERCITE <= 0.5.18 - Missing Authorization
Slug
parallax-image
Published
2023-11-20
Title
Parallax Image < 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
parallax-image
Published
2024-10-16
Title
Parallax Image < 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via dd-parallax Shortcode
Slug
parallax-image
Published
2024-11-18
Title
Parallax Image < 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via position Parameter
Slug
parallax-scrolling-enllax-js
Published
2025-09-05
Title
Parallax Scrolling Enllax.js <= 0.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
parallax-scrolling-enllax-js
Published
2025-09-05
Title
Parallax Scrolling Enllax.js <= 0.0.6 - Cross-Site Request Forgery
Slug
parallax-section
Published
2025-08-26
Title
Parallax Section block < 2.0.0 - Missing Authorization
Slug
parallax-slider-block
Published
2023-11-29
Title
Parallax Slider Block < 1.2.6 - Author+ Stored XSS
Slug
parallaxer-lite-parallax-effects-on-images
Published
2024-11-08
Title
Parallaxer <= 1.00 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
parcel-tracker-ecourier
Published
2021-05-05
Title
Parcel Tracker eCourier < 1.0.2 - Plugin's Settings Update via CSRF
Slug
parcelpanel
Published
2024-05-06
Title
Shipment Tracking, Tracking, and Order Tracking for WooCommerce – ParcelPanel (Free to install) < 3.9.0 - Authenticated (Subscriber+) SQL Injection
Slug
parcelpanel
Published
2024-08-07
Title
ParcelPanel < 4.3.3 - Reflected Cross-Site Scripting
Slug
pardakht-delkhah
Published
2022-12-27
Title
Pardakht Delkhah < 2.9.3 - Unauthenticated Stored XSS
Slug
pardakht-delkhah
Published
2024-07-09
Title
Pardakht Delkhah < 2.9.9 - Form Fields Reset via CSRF
Slug
pardakht-delkhah
Published
2025-12-31
Title
Pardakht Delkhah <= 3.0.0 - Cross-Site Request Forgery
Slug
pardot
Published
2024-04-12
Title
Pardot < 2.1.1 - Missing Authorization
Slug
paritypress
Published
2024-07-26
Title
ParityPress < 1.0.1 - Admin+ Stored XSS
Slug
parone
Published
2024-11-08
Title
ParOne Feeds < 1.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting