Skip to content
OpenAdvisories

Vendor

PickPlugins

76 known vulnerabilities.

Products

Post Grid 13 Job Board Manager 9 Post Grid and Gutenberg Blocks 8 Accordion 6 Wishlist 6 Question Answer 3 Team Showcase 3 Testimonial Slider 3 Product Slider for WooCommerce 3 User Verification by PickPlugins 2 Mail Picker 2 Accordions 2 PickPlugins Product Designer for WooCommerce 2 Product Designer 2 Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins 1 PickPlugins Pricing Table 1 ComboBlocks 1 User profile 1 Post Grid and Gutenberg Blocks – ComboBlocks 1 Related Post 1 Related Posts By PickPlugins 1 Tabs & Accordion 1 User Verification 1 PickPlugins Question Answer 1 PickPlugins Product Slider for WooCommerce 1 Post Grid Combo – 36+ Gutenberg Blocks 1
All Critical High Medium Low Exploited only Public exploit

46 results · Clear filters · Feed

  • Medium 5.4
    CVE-2023-40557

    WordPress Tabs & Accordion plugin <= 1.3.10 - Content Injection vulnerability

    Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in PickPlugins Tabs & Accordion allows Code Injection.This issue affects Tabs & Accordion: from n/a through 1.3.10.

    PickPlugins Tabs & Accordion
  • Medium 6.4
    CVE-2024-3155

    Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 2.2.80 due to insufficient inp…

    PickPlugins Post Grid Web / CMS
  • Medium 5.4
    CVE-2024-1641

    Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication

    The Accordion plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the 'accordions_duplicate_post_as_draft' function in all versions up to, and including, 2.2.96. This makes it possibl…

    PickPlugins Accordions Web / CMS
  • Medium 6.3
    CVE-2024-29097

    WordPress User profile plugin <= 2.0.20 - Subscriber+ Stored Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins User profile allows Stored XSS.This issue affects User profile: from n/a through 2.0.20.

    PickPlugins User profile
  • Medium 6.5
    CVE-2023-51666

    WordPress Related Post Plugin <= 2.0.53 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Related Post allows Stored XSS.This issue affects Related Post: from n/a through 2.0.53.

    PickPlugins Related Post
  • Medium 6.4
    CVE-2023-6645

    Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scripting

    The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in all versions up to, and including, 2.2.64 due to insufficient input sanitization and output escaping. This makes it pos…

    PickPlugins Post Grid Web / CMS