Perfmatters vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20241
3. 20264

Newest CVEs

• CVE-2026-57671

  WordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability

  Perfmatters · perfmatters

  High7.1
• CVE-2026-13251

  Perfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' Parameter

  perfmatters · Perfmatters

  High7.5
• CVE-2026-4351

  Perfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' Parameter

  perfmatters · Perfmatters

  High8.1
• CVE-2026-4350

  Perfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter

  perfmatters · Perfmatters

  High8.1
• CVE-2023-47874

  WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access Control

  Perfmatters · Perfmatters

  Medium5.4
• CVE-2023-47876

  WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)

  Perfmatters · Perfmatters

  High7.1
• CVE-2023-47877

  WordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)

  Perfmatters · Perfmatters

  Medium6.5
• CVE-2023-47875

  WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)

  Perfmatters · Perfmatters

  Medium5.4