Login Request a demo
WP
Product
WP Pipes
by thimpress · last CVE Oct 22, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 2Medium 4Low 0
Severity
All severities9Critical3High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Pipes to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-28979
9.8
0%
Aug 14
WordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability
Affected: through 1.4.3
CVE-2025-28982
9.8
0%
Jul 16
WordPress WP Pipes plugin <= 1.4.3 - SQL Injection Vulnerability
Affected: through 1.4.3
CVE-2025-48267
9.1
0%
Jun 9
WordPress WP Pipes plugin <= 1.4.2 - Arbitrary File Deletion Vulnerability
Affected: through 1.4.2
CVE-2025-60227
8.6
1%
Oct 22
WordPress WP Pipes plugin <= 1.4.3 - Arbitrary File Deletion vulnerability
Affected: through 1.4.3
CVE-2022-45355
7.2
1%
Mar 29
Auth. (admin+) SQL Injection (SQLi) vulnerability in ThimPress WP Pipes plugin <= 1.33 versions
Affected: through 1.33
CVE-2025-47664
6.5
0%
May 7
WordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability
Affected: through 1.4.2
CVE-2023-40009
6.5
0%
Oct 3
Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Pipes plugin <= 1.4.0 versions
Affected: through 1.4.0
CVE-2025-28977
6.1
0%
Aug 20
WordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability
Affected: through 1.4.3
CVE-2024-12283
6.1
0%
Dec 11
WP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter
Affected: through 1.4.1
Showing 9