Skip to content
OpenAdvisories

Product · ThimPress

WP Pipes

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.6
    CVE-2025-60227

    WordPress WP Pipes plugin <= 1.4.3 - Arbitrary File Deletion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThimPress WP Pipes wp-pipes allows Path Traversal.This issue affects WP Pipes: from n/a through <= 1.4.3.

    ThimPress WP Pipes
  • High 7.1
    CVE-2025-28977

    WordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThimPress WP Pipes allows Reflected XSS. This issue affects WP Pipes: from n/a through 1.4.3.

    ThimPress WP Pipes
  • High 8.1
    CVE-2025-28979

    WordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress WP Pipes allows PHP Local File Inclusion. This issue affects WP Pipes: from n/a through 1.4.3.

    ThimPress WP Pipes
  • High 8.6
    CVE-2025-48267

    WordPress WP Pipes plugin <= 1.4.2 - Arbitrary File Deletion Vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ThimPress WP Pipes allows Path Traversal. This issue affects WP Pipes: from n/a through 1.4.2.

    ThimPress WP Pipes
  • High 8.2
    CVE-2022-45355

    WordPress WP Pipes Plugin <= 1.33 is vulnerable to SQL Injection (SQLi)

    Auth. (admin+) SQL Injection (SQLi) vulnerability in ThimPress WP Pipes plugin <= 1.33 versions.

    ThimPress WP Pipes