Pickplugins vulnerabilities
76 CVEs and advisories name Pickplugins as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-116392WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability
- CVE-2024-11080Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection
- CVE-2026-10207PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter
- CVE-2026-65456WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2026-10862Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field
- CVE-2025-62745WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-7458User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint
- CVE-2026-32497WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability
- CVE-2026-25455WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerability
- CVE-2025-68000WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability
- CVE-2025-68605WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-63043WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability
- CVE-2025-66058WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability
- CVE-2025-12374Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account Takeover
- CVE-2025-62929WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability
- CVE-2025-62924WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability
- CVE-2025-53421WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability
- CVE-2025-60162WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-58678WordPress Accordion Plugin <= 2.3.15 - Broken Access Control Vulnerability
- CVE-2025-58827WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability
- CVE-2025-54007WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability
- CVE-2025-49324WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control Vulnerability
- CVE-2025-49075WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-24655WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-32646WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-32647WordPress Question Answer plugin <= 1.2.73 - PHP Object Injection vulnerability
- CVE-2025-32618WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability
- CVE-2025-32144WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerability
- CVE-2025-32143WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerability
- CVE-2025-32272WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability