WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
pardakht-delkhah
Published
2024-07-09
Title
Pardakht Delkhah < 2.9.9 - Form Fields Reset via CSRF
Slug
pardakht-delkhah
Published
2025-12-31
Title
Pardakht Delkhah <= 3.0.0 - Cross-Site Request Forgery
Slug
pardot
Published
2024-04-12
Title
Pardot < 2.1.1 - Missing Authorization
Slug
paritypress
Published
2024-07-26
Title
ParityPress < 1.0.1 - Admin+ Stored XSS
Slug
parone
Published
2024-11-08
Title
ParOne Feeds < 1.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
parsi-font
Published
2016-04-12
Title
MW Font Changer < 4.3 - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
parsian-bank-gateway-for-woocommerce
Published
2021-12-14
Title
Parsian Bank Gateway for Woocommerce <= 1.0 - Reflected Cross-Site Scripting
Slug
partdo-core
Published
2023-12-07
Title
Multiple Plugins by KlbTheme - Reflected Cross-Site Scripting
Slug
participants-database
Published
2014-08-01
Title
Participants Database < 1.5.4.9 - Unauthenticated SQL Injection
Slug
participants-database
Published
2017-09-06
Title
Participants Database <= 1.7.5.9 - Cross-Site Scripting
Slug
participants-database
Published
2020-02-10
Title
Participants Database < 1.9.5.6 - Authenticated Time Based SQL Injection
Slug
participants-database
Published
2023-11-27
Title
Participants Database < 2.5.6 - Missing Authorization
Slug
participants-database
Published
2024-08-07
Title
Participants Database < 2.5.9.3 - Unauthenticated PHP Object Injection
Slug
participants-database
Published
2025-09-22
Title
Participants Database <= 2.7.7 - Contributor+ Stored XSS
Slug
particle-background
Published
2024-12-19
Title
Particle Background <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
partners
Published
2024-12-17
Title
Partners <= 0.2.0 - Unauthenticated PHP Object Injection
Slug
partners
Published
2025-01-14
Title
Partners <= 0.2.0 - Reflected Cross-Site Scripting
Slug
passbeemedia-web-push-notifications
Published
2025-02-26
Title
Passbeemedia Web Push Notifications <= 1.0.0 - Reflected XSS
Slug
password-for-wp
Published
2024-12-11
Title
Password for WP < 1.6 - Stored XSS via CSRF
Slug
password-only-login
Published
2025-10-08
Title
Password only login <= 0.2 - Reflected Cross-Site Scripting
Slug
password-policy-manager
Published
2025-06-05
Title
Password Policy Manager < 2.0.5 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover
Slug
password-policy-manager
Published
2025-10-24
Title
Password Policy Manager | Password Manager < 2.0.6 - Missing Authorization to Authenticated (Subscriber+) Configuration Log Out
Slug
password-protect-page
Published
2023-01-10
Title
PPWP – WordPress Password Protect Page < 1.8.6 - Contributor+ Stored XSS in Shortcode
Slug
password-protect-page
Published
2024-02-07
Title
PPWP – Password Protect Pages < 1.9.0 - Protection Mechanism Bypass
Slug
password-protect-page
Published
2024-12-16
Title
PPWP – Password Protect Pages < 1.9.6 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure