Login Request a demo
WP
Product
WP Pipes
by ThimPress · last CVE Oct 22, 2025
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 3High 2Medium 4Low 0
Severity
All severities9Critical3High2Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Pipes to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-47664
6.5
0%
May 7
Server-Side Request Forgery (SSRF) vulnerability in ThimPress WP Pipes allows Server Side Request Forgery
Affected: through 1.4.3
CVE-2023-40009
6.5
0%
Oct 3
Cross-Site Request Forgery (CSRF) vulnerability in ThimPress WP Pipes plugin <= 1.4.0 versions
Affected: through 1.4.0
CVE-2025-28977
6.1
0%
Aug 20
WordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability
Affected: through 1.4.3
CVE-2024-12283
6.1
0%
Dec 11
The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘x1’ parameter in all versions up to, and including, 1.4.1 due to insufficient input…
Affected: before 1.4.2
Showing 4