Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

PeepSo vulnerabilities

19 published CVEs name PeepSo among the affected products.

All 19 in the listAtom feed of new CVEs
Published CVEs
19
Last 12 months
2
Critical
0
Known exploited
0

Critical 0High 3Medium 16Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20236
  2. 20249
  3. 20252
  4. 20262

Newest CVEs

  • CVE-2026-40805

    WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability

    PeepSo · PeepSo

    High7.7
  • CVE-2026-66668

    WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability

    PeepSo · Community by PeepSo

    High8.5
  • CVE-2024-9017

    PeepSo Core: Groups <= 6.4.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Description

    PeepSo · PeepSo Core: Groups

    Medium6.4
  • CVE-2024-8988

    PeepSo Core: File Uploads <= 6.4.6.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via file_download

    PeepSo · PeepSo Core: File Uploads

    Medium5.3
  • CVE-2024-11447

    Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <=7.0.3.0 - Reflected Cross-Site Scripting

    peepso · Community by PeepSo – Download from PeepSo.com

    Medium6.1
  • CVE-2024-9873

    Community by PeepSo <= 6.4.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

    peepso · Community by PeepSo – Download from PeepSo.com

    Medium5.4
  • CVE-2024-7426

    Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.6.0 - Unauthenticated Full Path Disclosure

    peepso · Community by PeepSo – Download from PeepSo.com

    Medium5.3
  • CVE-2024-7618

    Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via content Parameter

    peepso · Community by PeepSo – Download from PeepSo.com

    Medium4.4
  • CVE-2024-7655

    Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

    peepso · Community by PeepSo – Download from PeepSo.com

    Medium4.4
  • CVE-2024-31251

    WordPress Community by PeepSo plugin <= 6.3.1.1 - Cross Site Request Forgery (CSRF) vulnerability

    PeepSo · Community by PeepSo

    Medium4.3

Products with the most CVEs

  1. Community by PeepSo5
  2. Community by PeepSo – Download from PeepSo.com5
  3. Community by PeepSo – Social Network, Membership, Registration, User Profiles5
  4. Download Community by PeepSo1
  5. PeepSo1
  6. PeepSo Core: File Uploads1
  7. PeepSo Core: Groups1

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)8
  2. CWE-352 Cross-site request forgery (CSRF)5
  3. CWE-200 Exposure of sensitive information2
  4. CWE-209 Sensitive information in an error message1
  5. CWE-22 Path traversal1
  6. CWE-532 Sensitive information in a log file1
  7. CWE-639 Authorization bypass through a user-controlled key (IDOR)1
  8. CWE-89 SQL injection1