Pickplugins vulnerabilities

Products

• Post Grid 16
• Post Grid 15
• Accordion 10
• Job Board Manager 9
• Post Grid And Gutenberg Blocks 8
• Testimonial Slider 7
• Wishlist 6
• Post Grid Combo 5
• Product Slider For Woocommerce 5
• Team Showcase 5
• Comboblocks 4
• Product Designer For Woocommerce 3
• Product Slider For Woocommerce 3
• Question Answer 3
• Team Showcase 3
• User Verification By Pickplugins 3
• Accordions 2
• Mail Picker 2
• Product Designer 2
• Product Designer 2
• User Verification 2

Newest

• pickplugins accordion WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability CVE-2026-116392 7.2 HighOctober 28, 2026
• pickplugins product designer for woocommerce, unknown pickplugins product designer for woocommerce +1 more Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection CVE-2026-87844 5.3 MediumOctober 18, 2026
• pickplugins post grid Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection CVE-2024-11080 9.8 CriticalSeptember 5, 2026
• pickplugins user verification by pickplugins User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR CVE-2026-14861 7.5 HighAugust 19, 2026
• pickplugins accordion WordPress Accordion plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-66471 6.5 MediumAugust 13, 2026
• pickplugins question answer PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter CVE-2026-10207 7.5 HighJuly 28, 2026
• pickplugins product slider for woocommerce WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability CVE-2026-65456 4.3 MediumJuly 23, 2026
• biplob adhikari accordions Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field CVE-2026-10862 6.4 MediumJune 9, 2026
• pickplugins team showcase WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability CVE-2025-62745 6.5 MediumMay 25, 2026
• pickplugins user verification by pickplugins User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint CVE-2026-7458 Public exploit 9.8 CriticalMay 2, 2026
• pickplugins user verification WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability CVE-2026-32497 5.3 MediumMarch 25, 2026
• pickplugins product slider for woocommerce WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerability CVE-2026-25455 6.5 MediumMarch 25, 2026
• pickplugins testimonial slider WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability CVE-2025-68000 6.5 MediumFebruary 20, 2026
• pickplugins accordion WordPress Accordion plugin <= 3.0.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-69350 5.9 MediumJanuary 6, 2026
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability CVE-2025-68605 6.5 MediumDecember 24, 2025
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability CVE-2025-63043 5.3 MediumDecember 18, 2025
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability CVE-2025-66058 6.5 MediumDecember 18, 2025
• pickplugins user verification by pickplugins Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account Takeover CVE-2025-12374 9.8 CriticalDecember 5, 2025
• pickplugins testimonial slider WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability CVE-2025-62929 6.5 MediumOctober 27, 2025
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability CVE-2025-62924 6.5 MediumOctober 27, 2025
• pickplugins accordion WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability CVE-2025-53421 6.5 MediumOctober 22, 2025
• pickplugins job board manager WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability CVE-2025-60162 6.5 MediumSeptember 26, 2025
• pickplugins testimonial slider WordPress Testimonial Slider Plugin <= 3.5.8.6 - Local File Inclusion Vulnerability CVE-2025-60126 8.8 HighSeptember 26, 2025
• pickplugins accordion WordPress Accordion Plugin <= 2.3.15 - Broken Access Control Vulnerability CVE-2025-58678 6.5 MediumSeptember 22, 2025
• pickplugins job board manager WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability CVE-2025-58827 3.8 LowSeptember 5, 2025
• pickplugins post grid and gutenberg blocks WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability CVE-2025-54007 8.8 HighAugust 20, 2025
• pickplugins job board manager WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control Vulnerability CVE-2025-49324 5.3 MediumJune 6, 2025
• pickplugins wishlist WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability CVE-2025-49075 6.5 MediumJune 6, 2025
• pickplugins post grid, unknown post grid, posts slider, posts carousel, post filter, post masonry +1 more Post Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSS CVE-2024-9645 5.4 MediumMay 15, 2025
• pickplugins wishlist WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-24655 7.1 HighApril 17, 2025
• pickplugins question answer WordPress Question Answer plugin <= 1.2.73 - PHP Object Injection vulnerability CVE-2025-32647 8.8 HighApril 17, 2025
• pickplugins question answer WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-32646 7.1 HighApril 17, 2025
• pickplugins wishlist WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability CVE-2025-32618 8.5 HighApril 11, 2025
• pickplugins job board manager WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerability CVE-2025-32144 8.8 HighApril 11, 2025
• pickplugins accordion WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerability CVE-2025-32143 8.8 HighApril 11, 2025
• pickplugins wishlist WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-32272 4.3 MediumApril 4, 2025
• pickplugins testimonial slider WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerability CVE-2025-30889 8.8 HighApril 3, 2025
• pickplugins job board manager WordPress Job Board Manager Plugin <= 2.1.61 - Broken Access Control vulnerability CVE-2025-31862 5.3 MediumApril 1, 2025
• pickplugins question answer WordPress Question Answer plugin <= 1.2.73 - Broken Access Control vulnerability CVE-2025-31810 5.3 MediumApril 1, 2025
• pickplugins related posts, inline related posts, contextual related posts, related content by pickplugins Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.59 - Cross-Site Request Forgery to Stored Cross-Site Scripting CVE-2024-12634 6.1 MediumMarch 7, 2025
• pickplugins wishlist Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12809 6.4 MediumMarch 7, 2025
• pickplugins pricing table Pricing Table by PickPlugins <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-13469 6.4 MediumFebruary 28, 2025
• pickplugins post grid Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure CVE-2024-13796 5.3 MediumFebruary 28, 2025
• pickplugins wishlist WordPress Wishlist Plugin <= 1.0.41 - SQL Injection vulnerability CVE-2025-26915 8.5 HighFebruary 25, 2025
• pickplugins comboblocks, post grid +1 more Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation CVE-2024-13798 5.3 MediumFebruary 22, 2025
• pickplugins job board manager WordPress Job Board Manager Plugin <= 2.1.61 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-22679 7.1 HighFebruary 3, 2025
• pickplugins job board manager WordPress Job Board Manager plugin <= 2.1.59 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-24622 5.4 MediumJanuary 24, 2025
• pickplugins post grid, wpwax post grid, slider & carousel ultimate – with shortcode, gutenberg block & elementor widget +1 more Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion CVE-2024-13408 7.5 HighJanuary 24, 2025
• pickplugins post grid and gutenberg blocks – comboblocks Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation CVE-2024-9636 9.8 CriticalJanuary 15, 2025
• pickplugins job board manager WordPress Job Board Manager plugin <= 2.1.61 - Broken Access Control vulnerability CVE-2024-55993 5.3 MediumDecember 16, 2024
• Show olderLoading…