Login Request a demo
PI
Vendor
PickPlugins
28 products with CVEs on record
103
CVEs
0
On KEV
1
New 30D
Products
AC
Accordion
PickPlugins
8.8
7 CVEs0 on KEV1 new
PG
Post Grid
pickplugins
9.8
22 CVEs0 on KEV0 new
JB
Job Board Manager
PickPlugins
8.8
9 CVEs0 on KEV0 new
PG
Post Grid and Gutenberg Blocks
pickplugins
8.8
8 CVEs0 on KEV0 new
TS
Team Showcase
PickPlugins
8.8
7 CVEs0 on KEV0 new
WI
Wishlist
pickplugins
8.5
6 CVEs0 on KEV0 new
PG
Post Grid Combo
Pickplugins
7.5
5 CVEs0 on KEV0 new
PS
Product Slider for WooCommerce
PickPlugins
6.5
5 CVEs0 on KEV0 new
CO
ComboBlocks
PickPlugins
6.5
4 CVEs0 on KEV0 new
PD
Product Designer
PickPlugins
8.7
3 CVEs0 on KEV0 new
QA
Question Answer
PickPlugins
8.8
3 CVEs0 on KEV0 new
TS
Testimonial Slider
PickPlugins
8.8
3 CVEs0 on KEV0 new
AC
Accordions
pickplugins
6.4
2 CVEs0 on KEV0 new
MP
Mail Picker
PickPlugins
9.8
2 CVEs0 on KEV0 new
PP
PickPlugins Product Designer for WooCommerce
pickplugins
6.4
2 CVEs0 on KEV0 new
UV
User Verification
PickPlugins
9.8
2 CVEs0 on KEV0 new
UV
User Verification by PickPlugins
pickplugins
9.8
2 CVEs0 on KEV0 new
BR
Breadcrumb
Pickplugins
5.4
1 CVEs0 on KEV0 new
PB
Page Builder Comboblocks
Pickplugins
6.4
1 CVEs0 on KEV0 new
PP
PickPlugins Pricing Table
pickplugins
5.4
1 CVEs0 on KEV0 new
PQ
PickPlugins Question Answer
pickplugins
7.5
1 CVEs0 on KEV0 new
PG
Post Grid and Gutenberg Blocks – ComboBlocks
pickplugins
9.8
1 CVEs0 on KEV0 new
PT
Pricing Table
Pickplugins
5.4
1 CVEs0 on KEV0 new
RP
Related Post
Pickplugins
5.4
1 CVEs0 on KEV0 new
RP
Related Posts By PickPlugins
pickplugins
5.3
1 CVEs0 on KEV0 new
RP
Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins
pickplugins
6.1
1 CVEs0 on KEV0 new
TA
Tabs & Accordion
PickPlugins
5.4
1 CVEs0 on KEV0 new
UP
User profile
PickPlugins
6.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116392
New
AC
Accordion
PickPlugins
7.2–Oct 28WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability
CVE-2024-11080
PG
Post Grid
pickplugins
9.8
1%
Sep 5Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection
CVE-2026-10207
PQ
PickPlugins Question Answer
pickplugins
7.5
1%
Jul 28PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter
CVE-2026-65456
PS
Product Slider for WooCommerce
PickPlugins
4.3
0%
Jul 23WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-10862
AC
Accordions
pickplugins
6.4
0%
Jun 9Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field
CVE-2025-62745
TS
Team Showcase
PickPlugins
6.5
0%
May 25WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability
CVE-2026-7458
UV
User Verification by PickPlugins
pickplugins
9.8
1%
May 2User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint
CVE-2026-32497
UV
User Verification
PickPlugins
5.3
0%
Mar 25WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability
CVE-2026-25455
PS
Product Slider for WooCommerce
PickPlugins
6.5
0%
Mar 25WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerability
CVE-2025-68000
TS
Testimonial Slider
PickPlugins
6.5
0%
Feb 20WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability
CVE-2025-68605
PG
Post Grid and Gutenberg Blocks
PickPlugins
6.5
0%
Dec 24WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability
CVE-2025-63043
PG
Post Grid and Gutenberg Blocks
PickPlugins
5.3
0%
Dec 18WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-66058
PG
Post Grid and Gutenberg Blocks
PickPlugins
6.5
0%
Dec 18WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability
CVE-2025-12374
UV
User Verification by PickPlugins
pickplugins
9.8
0%
Dec 5Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account Takeover
CVE-2025-62929
TS
Testimonial Slider
PickPlugins
6.5
0%
Oct 27WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability
CVE-2025-62924
PG
Post Grid and Gutenberg Blocks
PickPlugins
6.5
0%
Oct 27WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability
CVE-2025-53421
AC
Accordion
PickPlugins
6.5
0%
Oct 22WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability
CVE-2025-60162
JB
Job Board Manager
PickPlugins
6.5
0%
Sep 26WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58678
AC
Accordion
PickPlugins
6.5
0%
Sep 22WordPress Accordion Plugin <= 2.3.15 - Broken Access Control Vulnerability
CVE-2025-58827
JB
Job Board Manager
PickPlugins
3.8
0%
Sep 5WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability
CVE-2025-54007
PG
Post Grid and Gutenberg Blocks
PickPlugins
8.8
0%
Aug 20WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability
CVE-2025-49324
JB
Job Board Manager
PickPlugins
5.3
0%
Jun 6WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control Vulnerability
CVE-2025-49075
WI
Wishlist
PickPlugins
6.5
0%
Jun 6WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability
CVE-2024-9645
PG
Post Grid
Pickplugins
5.4
0%
May 15Post Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSS
CVE-2025-24655
WI
Wishlist
PickPlugins
7.1
0%
Apr 17WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32646
QA
Question Answer
PickPlugins
7.1
0%
Apr 17WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32647
QA
Question Answer
PickPlugins
8.8
0%
Apr 17WordPress Question Answer plugin <= 1.2.73 - PHP Object Injection vulnerability
CVE-2025-32618
WI
Wishlist
PickPlugins
8.5
1%
Apr 11WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability
CVE-2025-32144
JB
Job Board Manager
PickPlugins
8.8
1%
Apr 11WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerability
CVE-2025-32143
AC
Accordion
PickPlugins
8.8
1%
Apr 11WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerability
CVE-2025-32272
WI
Wishlist
PickPlugins
4.3
0%
Apr 4WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-30889
TS
Testimonial Slider
PickPlugins
8.8
0%
Apr 3WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerability
CVE-2025-31862
JB
Job Board Manager
PickPlugins
5.3
0%
Apr 1WordPress Job Board Manager Plugin <= 2.1.61 - Broken Access Control vulnerability
CVE-2025-31810
QA
Question Answer
PickPlugins
5.3
0%
Apr 1WordPress Question Answer plugin <= 1.2.73 - Broken Access Control vulnerability
CVE-2024-12634
RP
Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins
pickplugins
6.1
0%
Mar 7Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.59 - Cross-Site Request Forgery to Stored Cross-Site Scripting
CVE-2024-12809
WI
Wishlist
pickplugins
6.4
0%
Mar 7Wishlist <= 1.0.43 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13469
PP
PickPlugins Pricing Table
pickplugins
5.4
0%
Feb 28Pricing Table by PickPlugins <= 1.12.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13796
PG
Post Grid
pickplugins
7.5
0%
Feb 28Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.6 - Unauthenticated User Information Exposure
CVE-2025-26915
WI
Wishlist
PickPlugins
8.5
0%
Feb 25WordPress Wishlist Plugin <= 1.0.41 - SQL Injection vulnerability
CVE-2024-13798
PG
Post Grid
pickplugins
5.3
0%
Feb 22Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation
CVE-2025-22679
JB
Job Board Manager
PickPlugins
7.1
0%
Feb 3WordPress Job Board Manager Plugin <= 2.1.61 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24622
JB
Job Board Manager
PickPlugins
5.4
0%
Jan 24WordPress Job Board Manager plugin <= 2.1.59 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-13408
PG
Post Grid
Pickplugins
8.8
1%
Jan 24Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget <= 1.6.10 - Authenticated (Contributor+) Local File Inclusion
CVE-2024-9636
PG
Post Grid and Gutenberg Blocks – ComboBlocks
pickplugins
9.8
1%
Jan 15Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation
CVE-2024-55993
JB
Job Board Manager
PickPlugins
5.3
1%
Dec 16WordPress Job Board Manager plugin <= 2.1.61 - Broken Access Control vulnerability
CVE-2024-54273
MP
Mail Picker
PickPlugins
9.8
1%
Dec 13WordPress Mail Picker plugin <= 1.0.14 - PHP Object Injection vulnerability
CVE-2024-10937
RP
Related Posts By PickPlugins
pickplugins
5.3
0%
Dec 5Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins <= 2.0.58 - Sensitive Information Exposure
CVE-2024-53772
MP
Mail Picker
PickPlugins
6.5
0%
Nov 30WordPress Mail Picker plugin <= 1.0.15 - Cross Site Scripting (XSS) vulnerability
CVE-2024-9111
PP
PickPlugins Product Designer for WooCommerce
pickplugins
6.4
1%
Nov 21Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-38726
PD
Product Designer
PickPlugins
7.5
0%
Nov 1WordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerability
CVE-2024-50432
PG
Post Grid and Gutenberg Blocks
PickPlugins
6.5
0%
Oct 28WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.93 - Cross Site Scripting (XSS) vulnerability
CVE-2021-4450
PG
Post Grid
pickplugins
8.8
0%
Oct 16Post Grid <= 2.1.12 - Contributor+ SQL Injection
CVE-2024-47340
PG
Post Grid and Gutenberg Blocks
PickPlugins
6.5
0%
Oct 6WordPress ComboBlocks plugin <= 2.2.89 - Cross Site Scripting (XSS) vulnerability
CVE-2024-47342
AC
Accordion
PickPlugins
6.5
0%
Oct 6WordPress Accordion plugin <= 2.2.99 - Cross Site Scripting (XSS) vulnerability
CVE-2024-44002
TS
Team Showcase
PickPlugins
6.1
0%
Sep 17WordPress Team Showcase plugin <= 1.22.25 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-45459
PS
Product Slider for WooCommerce
PickPlugins
6.1
0%
Sep 15WordPress Product Slider for WooCommerce by PickPlugins plugin <= 1.13.50 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-8253
PG
Post Grid and Gutenberg Blocks
pickplugins
8.8
9%
Sep 11Post Grid and Gutenberg Blocks 2.2.87 - 2.2.90 - Authenticated (Subscriber+) Privilege Escalation
CVE-2024-43321
TS
Team Showcase
PickPlugins
6.5
0%
Aug 18WordPress Team Showcase plugin <= 1.22.23 - Cross Site Scripting (XSS) vulnerability
CVE-2024-7588
PG
Post Grid
pickplugins
6.4
0%
Aug 14Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block
CVE-2024-43155
CO
ComboBlocks
PickPlugins
6.5
0%
Aug 12WordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerability