Login Request a demo
PE
Product
perfmatters
by perfmatters · last CVE Jul 2, 2026
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 6Medium 2Low 0
Severity
All severities8Critical0High6Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add perfmatters to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-47874
8.8
0%
Feb 29
Missing Authorization vulnerability in Perfmatters.This issue affects Perfmatters: from n/a through 2.1.6
Affected: before 2.1.7
CVE-2023-47875
8.8
0%
Nov 30
Cross-Site Request Forgery (CSRF) vulnerability in Perfmatters allows Cross Site Request Forgery.This issue affects Perfmatters: from n/a through 2.1.6
Affected: through 2.1.6
CVE-2026-4351
8.1
0%
Apr 10
Perfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' Parameter
Affected: through 2.5.9
CVE-2026-4350
8.1
1%
Apr 3
Perfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter
Affected: through 2.5.9.1
CVE-2026-13251
7.5
1%
Jul 2
Perfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' Parameter
Affected: through 2.6.4
CVE-2026-57671
7.1
0%
Jul 2
WordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability
Affected: through 2.6.4
CVE-2023-47876
6.1
0%
Nov 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Perfmatters allows Reflected XSS.This issue affects Perfmatters: from n/a…
Affected: through 2.1.6
CVE-2023-47877
5.4
0%
Nov 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Perfmatters allows Stored XSS.This issue affects Perfmatters: from n/a before…
Affected: before 2.2.0
Showing 8