Skip to content
OpenAdvisories

Vendor

wppochipp

3 known vulnerabilities.

Products

Pochipp 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-92967

    Pochipp <= 1.20.2 - Reflected Cross-Site Scripting via 'keyword' Parameter

    The Pochipp plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'keyword' parameter in versions up to, and including, 1.20.2. This is due to insufficient output escaping , which reads $_GET['keyword'], applies only sanitize_text_field…

    wppochipp Pochipp Web / CMS
  • Medium 5.4
    CVE-2026-32417

    WordPress Pochipp plugin < 1.18.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a through < 1.18.9.

    wppochipp Pochipp
  • Medium 5.3
    CVE-2025-66129

    WordPress Pochipp plugin <= 1.18.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wppochipp Pochipp pochipp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pochipp: from n/a through <= 1.18.0.

    wppochipp Pochipp