Login Request a demo
WP
Product
WP Pipes
by thimpress · last CVE Oct 22, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 2Medium 4Low 0
Severity
All severities9Critical3High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Pipes to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-47664
6.5
0%
May 7
WordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability
Affected: through 1.4.2
CVE-2023-40009
6.5
0%
Oct 3
WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: through 1.4.0
CVE-2025-28977
6.1
0%
Aug 20
WordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability
Affected: through 1.4.3
CVE-2024-12283
6.1
0%
Dec 11
WP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter
Affected: through 1.4.1
Showing 4