Skip to contentPickplugins vulnerabilities
Newest
- pickplugins mail pickerWordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerabilityCVE-2024-542739.8 Critical
- pickplugins post grid combo, related posts by pickplugins +1 moreRelated Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information ExposureCVE-2024-109375.3 Medium
- pickplugins mail pickerWordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-537726.5 Medium
- pickplugins product designer for woocommerceProduct Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-91116.4 Medium
- pickplugins product designerWordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerabilityCVE-2024-387267.5 High
- pickplugins post grid and gutenberg blocksWordPress Post Grid and Gutenberg Blocks plugin <= 2.2.93 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-504326.5 Medium
- pickplugins post gridPost Grid <= 2.1.12 - Contributor+ SQL InjectionCVE-2021-44508.8 High
- pickplugins post grid and gutenberg blocksWordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-473406.5 Medium
- pickplugins accordionWordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-473426.5 Medium
- pickplugins team showcaseWordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-440027.1 High
- pickplugins product slider for woocommerceWordPress Product Slider for WooCommerce by PickPlugins plugin <= 1.13.50 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-454597.1 High
- pickplugins post grid and gutenberg blocks, post grid +1 morePost Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege EscalationCVE-2024-82538.8 High
- pickplugins team showcaseWordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-433216.5 Medium
- pickplugins page builder comboblocks, post grid +1 moreGutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion BlockCVE-2024-75886.4 Medium
- pickplugins comboblocksWordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-431556.5 Medium
- pickplugins comboblocks, post grid +1 morePost Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date…CVE-2024-63466.4 Medium
- pickplugins job board managerWordPress Job Board Manager plugin <= 2.1.57 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-387226.5 Medium
- pickplugins product designer, product designer for woocommerce +1 moreProduct Designer <= 1.0.33 - Missing Authorization to Unauthenticated Arbitrary Attachment DeletionCVE-2024-36085.3 Medium
- pickplugins post grid, comboblocks +1 morePost Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block AttributeCVE-2024-40426.4 Medium
- pickplugins post gridPost Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-19886.4 Medium
- pickplugins tabs & accordionWordPress Tabs & Accordion plugin <= 1.3.10 - Content Injection vulnerabilityCVE-2023-405575.4 Medium
- pickplugins post grid, post grid combo +1 morePost Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-31556.4 Medium
- davidanderson testimonial sliderTestimonial Slider <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-41936.4 Medium
- pickplugins post gridWordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerabilityCVE-2024-328167.5 High
- pickplugins testimonial slider, radiustheme testimonial slider and showcase +1 moreTestimonial Slider < 2.3.8 - Admin+ Stored XSSCVE-2024-17465.4 Medium
- pickplugins post grid, unknown post grid, form maker, popup maker, woocommerce blocks, post blocks, post carousel +1 moreCombo Blocks < 2.2.76 - Unauthenticated Password Protected Posts AccessCVE-2024-0881EPSS 16.9%5.4 Medium
- biplob adhikari accordionsAccordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post DuplicationCVE-2024-16415.4 Medium
- pickplugins product designerWordPress Product Designer plugin <= 1.0.32 - PHP Object Injection vulnerabilityCVE-2024-312778.7 High
- pickplugins post gridWordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-304417.1 High
- pickplugins testimonial slider, radiustheme testimonial slider and showcase +1 moreTestimonial Slider < 2.3.7 - Author+ Settings UpdateCVE-2024-17454.3 Medium
- pickplugins user profileWordPress User profile plugin <= 2.0.20 - Subscriber+ Stored Cross Site Scripting (XSS) vulnerabilityCVE-2024-290976.3 Medium
- pickplugins post grid, post grid combo +1 morePost Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API EndpointCVE-2023-70727.5 High
- pickplugins related postWordPress Related Post Plugin <= 2.0.53 is vulnerable to Cross Site Scripting (XSS)CVE-2023-516666.5 Medium
- pickplugins post grid, post grid combo +1 morePost Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site ScriptingCVE-2023-66456.4 Medium
- pickplugins post grid combo – 36+ gutenberg blocks, post grid combo +1 moreWordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data ExposureCVE-2023-402117.5 High
- pickplugins accordionWordPress Accordion Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)CVE-2023-478095.9 Medium
- pickplugins product slider for woocommerce, unknown product slider for woocommerce by pickplugins +1 morePickPlugins Product Slider for WooCommerce < 1.13.42 - Contributor+ Stored XSSCVE-2023-01665.4 Medium
- pickplugins breadcrumbBreadcrumb < 1.5.33 - Contributor+ Stored XSS via ShortcodeCVE-2022-48365.4 Medium
- pickplugins user verificationUser Verification < 1.0.94 - Authentication BypassCVE-2022-46939.8 Critical
- pickplugins product slider for woocommerceProduct Slider for WooCommerce < 2.6.4 - Contributor+ Stored XSS in ShortcodeCVE-2022-46295.4 Medium
- pickplugins product slider for woocommerceProduct Slider for WooCommerce < 2.5.7 - Subscriber+ Arbitrary Options DeletionCVE-2022-23824.3 Medium
- pickplugins post gridPost Grid < 2.1.16 - Reflected Cross-Site Scripting via post_typesCVE-2022-04476.4 Medium
- pickplugins post gridPost Grid < 2.1.16 - Reflected Cross-Site Scripting via keywordCVE-2021-249866.1 Medium
- pickplugins post gridPost Grid < 2.1.8 - Reflected Cross-Site Scripting (XSS)CVE-2021-24488Public exploitEPSS 11.2%6.1 Medium
- pickplugins product slider for woocommercePickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)CVE-2021-24300Public exploitEPSS 10.6%6.1 Medium
- pickplugins accordionAccordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)CVE-2021-242835.4 Medium
- pickplugins team showcase, post grid +1 morePHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress...CVE-2020-359397.5 High
- pickplugins post grid, team showcase +1 morePHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow...CVE-2020-359387.5 High
- pickplugins team showcase, post grid +1 moreStored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for...CVE-2020-359377.5 High
- pickplugins post grid, team showcase +1 moreStored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for...CVE-2020-359367.5 High
- Show moreLoading…