CVEs we hold for Pickplugins
Records whose assigning authority named Pickplugins as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-7458User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API…PickPlugins
CVE-2026-65456WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerabilityPickPlugins Product Slider for WooCommerce
CVE-2026-32497WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerabilityPickPlugins User Verification
CVE-2026-25455WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerabilityPickPlugins Product Slider for WooCommerce
CVE-2026-10862Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Fieldpickplugins Accordions
CVE-2026-10207PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' ParameterPickPlugins Question Answer
CVE-2025-68605WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Post Grid and Gutenberg Blocks
CVE-2025-68000WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerabilityPickPlugins Testimonial Slider
CVE-2025-66058WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerabilityPickPlugins Post Grid and Gutenberg Blocks
CVE-2025-63043WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerabilityPickPlugins Post Grid and Gutenberg Blocks
CVE-2025-62929WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerabilityPickPlugins Testimonial Slider
CVE-2025-62924WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerabilityPickPlugins Post Grid and Gutenberg Blocks
CVE-2025-62745WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Team Showcase
CVE-2025-60162WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) VulnerabilityPickPlugins Job Board Manager
CVE-2025-58827WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection VulnerabilityPickPlugins Job Board Manager
CVE-2025-58678WordPress Accordion Plugin <= 2.3.15 - Broken Access Control VulnerabilityPickPlugins Accordion
CVE-2025-54007WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection VulnerabilityPickPlugins Post Grid and Gutenberg Blocks
CVE-2025-53421WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerabilityPickPlugins Accordion
CVE-2025-49324WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control VulnerabilityPickPlugins Job Board Manager
CVE-2025-49075WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Wishlist
CVE-2025-32647WordPress Question Answer plugin <= 1.2.73 - PHP Object Injection vulnerabilityPickPlugins Question Answer
CVE-2025-32646WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerabilityPickPlugins Question Answer
CVE-2025-32272WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerabilityPickPlugins Wishlist
CVE-2025-32144WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerabilityPickPlugins Job Board Manager
CVE-2025-32143WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerabilityPickPlugins Accordion
CVE-2025-31862WordPress Job Board Manager Plugin <= 2.1.61 - Broken Access Control vulnerabilityPickPlugins Job Board Manager
CVE-2025-31810WordPress Question Answer plugin <= 1.2.73 - Broken Access Control vulnerabilityPickPlugins Question Answer
CVE-2025-30889WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerabilityPickPlugins Testimonial Slider
CVE-2025-24655WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerabilityPickPlugins Wishlist
CVE-2025-24622WordPress Job Board Manager plugin <= 2.1.59 - Cross Site Request Forgery (CSRF) vulnerabilityPickPlugins Job Board Manager
CVE-2025-22679WordPress Job Board Manager Plugin <= 2.1.61 - Reflected Cross Site Scripting (XSS) vulnerabilityPickPlugins Job Board Manager
CVE-2025-12374Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <=…PickPlugins
CVE-2024-9636Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalationpickplugins Post Grid and Gutenberg Blocks – ComboBlocks
CVE-2024-9111Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadPickPlugins Product Designer for WooCommerce
CVE-2024-8253Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalationpickplugins Post Grid and Gutenberg Blocks
CVE-2024-7588Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via…pickplugins Post Grid
CVE-2024-6346Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 -…pickplugins Post Grid
CVE-2024-55993WordPress Job Board Manager plugin <= 2.1.61 - Broken Access Control vulnerabilityPickPlugins Job Board Manager
CVE-2024-54273WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerabilityPickPlugins Mail Picker
CVE-2024-53772WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Mail Picker
CVE-2024-50432WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.93 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Post Grid and Gutenberg Blocks
CVE-2024-47342WordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Accordion
CVE-2024-47340WordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Post Grid and Gutenberg Blocks
CVE-2024-45459WordPress Product Slider for WooCommerce by PickPlugins plugin <= 1.13.50 - Reflected Cross Site Scripting (XSS)…PickPlugins Product Slider for WooCommerce
CVE-2024-44002WordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerabilityPickPlugins Team Showcase
CVE-2024-43321WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Team Showcase
CVE-2024-43155WordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerabilityPickPlugins ComboBlocks
CVE-2024-4042Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 -…pickplugins Post Grid
CVE-2024-38726WordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerabilityPickPlugins Product Designer
CVE-2024-38722WordPress Job Board Manager plugin <= 2.1.57 - Cross Site Scripting (XSS) vulnerabilityPickPlugins Job Board Manager
CVE-2024-3608Product Designer <= 1.0.33 - Missing Authorization to Unauthenticated Arbitrary Attachment DeletionPickPlugins Product Designer for WooCommerce
CVE-2024-32816WordPress Combo Blocks plugin <= 2.2.78 - Sensitive Data Exposure via API vulnerabilityPickPlugins Post Grid
CVE-2024-3155Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 -…pickplugins Post Grid
CVE-2024-31277WordPress Product Designer plugin <= 1.0.32 - PHP Object Injection vulnerabilityPickPlugins Product Designer
CVE-2024-30441WordPress Combo Blocks plugin <= 2.2.74 - Reflected Cross Site Scripting (XSS) vulnerabilityPickPlugins Post Grid
CVE-2024-29097WordPress User profile plugin <= 2.0.20 - Subscriber+ Stored Cross Site Scripting (XSS) vulnerabilityPickPlugins User profile
CVE-2024-1988Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 -…pickplugins Post Grid
CVE-2024-1641Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplicationpickplugins Accordions
CVE-2024-13798Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creationpickplugins Post Grid
CVE-2024-13796Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposurepickplugins Post Grid
CVE-2024-13469Pricing Table by PickPlugins <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site ScriptingPickPlugins Pricing Table
CVE-2024-12809Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scriptingpickplugins Wishlist
CVE-2024-12634Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.59 - Cross-Site…PickPlugins
CVE-2024-11080Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injectionpickplugins Post Grid
CVE-2024-10937Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive…PickPlugins
CVE-2023-7072Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpointpickplugins Post Grid
CVE-2023-6645Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.64 - Authenticated (Contributor+) Cross-Site Scriptingpickplugins Post Grid
CVE-2023-51666WordPress Related Post Plugin <= 2.0.53 is vulnerable to Cross Site Scripting (XSS)PickPlugins Related Post
CVE-2023-40557WordPress Tabs & Accordion plugin <= 1.3.10 - Content Injection vulnerabilityPickPlugins Tabs & Accordion
CVE-2023-40211WordPress Post Grid Plugin <= 2.2.50 is vulnerable to Sensitive Data ExposurePickPlugins Post Grid Combo – 36+ Gutenberg Blocks
CVE-2021-24300PickPlugins Product Slider for WooCommerce < 1.13.22 - Reflected Cross-Site Scripting (XSS)PickPlugins Product Slider for WooCommerce
CVE-2021-24283Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)PickPlugins Accordion
75 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.