Skip to content
OpenAdvisories

Vendor

PickPlugins

76 known vulnerabilities.

Products

Post Grid 13 Job Board Manager 9 Post Grid and Gutenberg Blocks 8 Accordion 6 Wishlist 6 Question Answer 3 Team Showcase 3 Testimonial Slider 3 Product Slider for WooCommerce 3 User Verification by PickPlugins 2 Mail Picker 2 Accordions 2 PickPlugins Product Designer for WooCommerce 2 Product Designer 2 Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins 1 PickPlugins Pricing Table 1 ComboBlocks 1 User profile 1 Post Grid and Gutenberg Blocks – ComboBlocks 1 Related Post 1 Related Posts By PickPlugins 1 Tabs & Accordion 1 User Verification 1 PickPlugins Question Answer 1 PickPlugins Product Slider for WooCommerce 1 Post Grid Combo – 36+ Gutenberg Blocks 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-7458 Public exploit

    User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint

    The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.46. This is due to the use of a loose PHP comparison operator to validate OTP codes in the "user_verification_form_wrap_…

    PickPlugins User Verification by PickPlugins Web / CMS
  • Unscored —
    CVE-2021-24300 Public exploit EPSS 11%

    PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)

    The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to reflected Cross-Site Scripting issue

    PickPlugins PickPlugins Product Slider for WooCommerce Web / CMS