PickPlugins vulnerabilities

CVEs per yearBy the year they were published

1. 20212
2. 20231
3. 202431
4. 202532
5. 202610

Newest CVEs

• CVE-2026-116392

  WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability

  PickPlugins · Accordion

  High7.2
• CVE-2024-11080

  Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection

  pickplugins · Post Grid

  Critical9.8
• CVE-2026-10207

  PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter

  pickplugins · PickPlugins Question Answer

  High7.5
• CVE-2026-65456

  WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability

  PickPlugins · Product Slider for WooCommerce

  Medium4.3
• CVE-2026-10862

  Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field

  pickplugins · Accordions

  Medium6.4
• CVE-2025-62745

  WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability

  PickPlugins · Team Showcase

  Medium6.5
• CVE-2026-7458

  User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint

  pickplugins · User Verification by PickPlugins

  Critical9.8
• CVE-2026-32497

  WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability

  PickPlugins · User Verification

  Medium5.3
• CVE-2026-25455

  WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerability

  PickPlugins · Product Slider for WooCommerce

  Medium6.5
• CVE-2025-68000

  WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability

  PickPlugins · Testimonial Slider

  Medium6.5