Pickplugins vulnerabilities
76 CVEs and advisories name Pickplugins as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-30889WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerability
- CVE-2025-31862WordPress Job Board Manager Plugin <= 2.1.61 - Broken Access Control vulnerability
- CVE-2025-31810WordPress Question Answer plugin <= 1.2.73 - Broken Access Control vulnerability
- CVE-2024-12634Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.59 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2024-12809Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-13469Pricing Table by PickPlugins <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-13796Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure
- CVE-2025-26915WordPress Wishlist Plugin <= 1.0.41 - SQL Injection vulnerability
- CVE-2024-13798Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation
- CVE-2025-22679WordPress Job Board Manager Plugin <= 2.1.61 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-24622WordPress Job Board Manager plugin <= 2.1.59 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-9636Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation
- CVE-2024-55993WordPress Job Board Manager plugin <= 2.1.61 - Broken Access Control vulnerability
- CVE-2024-54273WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability
- CVE-2024-10937Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposure
- CVE-2024-53772WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-9111Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2024-38726WordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerability
- CVE-2024-50432WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.93 - Cross Site Scripting (XSS) vulnerability
- CVE-2021-4450Post Grid <= 2.1.12 - Contributor+ SQL Injection
- CVE-2024-47340WordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-47342WordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-44002WordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-45459WordPress Product Slider for WooCommerce by PickPlugins plugin <= 1.13.50 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2024-8253Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation
- CVE-2024-43321WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-7588Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block
- CVE-2024-43155WordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-6346Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget
- CVE-2024-38722WordPress Job Board Manager plugin <= 2.1.57 - Cross Site Scripting (XSS) vulnerability