Login Request a demo
PI
Vendor
PickPlugins
18 products with CVEs on record
67
CVEs
0
On KEV
1
New 30D
Products
AC
Accordion
PickPlugins
8.8
6 CVEs0 on KEV1 new
PG
Post Grid
pickplugins
9.8
15 CVEs0 on KEV0 new
TS
Team Showcase
PickPlugins
8.8
6 CVEs0 on KEV0 new
JB
Job Board Manager
PickPlugins
8.8
5 CVEs0 on KEV0 new
PG
Post Grid and Gutenberg Blocks
PickPlugins
8.8
5 CVEs0 on KEV0 new
PS
Product Slider for WooCommerce
PickPlugins
6.5
5 CVEs0 on KEV0 new
WI
Wishlist
PickPlugins
8.5
4 CVEs0 on KEV0 new
CO
Comboblocks
Pickplugins
5.4
3 CVEs0 on KEV0 new
PG
Post Grid Combo
Pickplugins
7.5
3 CVEs0 on KEV0 new
QA
Question Answer
PickPlugins
8.8
3 CVEs0 on KEV0 new
TS
Testimonial Slider
PickPlugins
8.8
3 CVEs0 on KEV0 new
UV
User Verification
PickPlugins
9.8
2 CVEs0 on KEV0 new
UV
User Verification by PickPlugins
pickplugins
9.8
2 CVEs0 on KEV0 new
AC
Accordions
pickplugins
6.4
1 CVEs0 on KEV0 new
BR
Breadcrumb
Pickplugins
5.4
1 CVEs0 on KEV0 new
PQ
PickPlugins Question Answer
pickplugins
7.5
1 CVEs0 on KEV0 new
PT
Pricing Table
Pickplugins
5.4
1 CVEs0 on KEV0 new
RP
Related Post
Pickplugins
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116392
New
AC
Accordion
PickPlugins
7.2–Oct 28WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability
CVE-2024-11080
PG
Post Grid
pickplugins
9.8
1%
Sep 5Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection
CVE-2026-10207
PQ
PickPlugins Question Answer
pickplugins
7.5
1%
Jul 28PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter
CVE-2026-65456
PS
Product Slider for WooCommerce
PickPlugins
4.3
0%
Jul 23WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability
CVE-2026-10862
AC
Accordions
pickplugins
6.4
0%
Jun 9Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field
CVE-2025-62745
TS
Team Showcase
PickPlugins
6.5
0%
May 25WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability
CVE-2026-7458
UV
User Verification by PickPlugins
pickplugins
9.8
1%
May 2User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint
CVE-2026-32497
UV
User Verification
PickPlugins
5.3
0%
Mar 25WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability
CVE-2026-25455
PS
Product Slider for WooCommerce
PickPlugins
6.5
0%
Mar 25WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerability
CVE-2025-68000
TS
Testimonial Slider
PickPlugins
6.5
0%
Feb 20WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability
CVE-2025-68605
PG
Post Grid and Gutenberg Blocks
PickPlugins
6.5
0%
Dec 24WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability
CVE-2025-63043
PG
Post Grid and Gutenberg Blocks
PickPlugins
5.3
0%
Dec 18WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability
CVE-2025-66058
PG
Post Grid and Gutenberg Blocks
PickPlugins
6.5
0%
Dec 18WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability
CVE-2025-12374
UV
User Verification by PickPlugins
pickplugins
9.8
0%
Dec 5Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account Takeover
CVE-2025-62929
TS
Testimonial Slider
PickPlugins
6.5
0%
Oct 27WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability
CVE-2025-62924
PG
Post Grid and Gutenberg Blocks
PickPlugins
6.5
0%
Oct 27WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability
CVE-2025-53421
AC
Accordion
PickPlugins
6.5
0%
Oct 22WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability
CVE-2025-60162
JB
Job Board Manager
PickPlugins
6.5
0%
Sep 26WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58678
AC
Accordion
PickPlugins
6.5
0%
Sep 22WordPress Accordion Plugin <= 2.3.15 - Broken Access Control Vulnerability
CVE-2025-58827
JB
Job Board Manager
PickPlugins
3.8
0%
Sep 5WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability
CVE-2025-54007
PG
Post Grid and Gutenberg Blocks
PickPlugins
8.8
0%
Aug 20WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability
CVE-2025-49324
JB
Job Board Manager
PickPlugins
5.3
0%
Jun 6WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control Vulnerability
CVE-2025-49075
WI
Wishlist
PickPlugins
6.5
0%
Jun 6WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability
CVE-2024-9645
PG
Post Grid
Pickplugins
5.4
0%
May 15Post Grid and Gutenberg Blocks < 2.2.93 - Contributor+ Stored XSS
CVE-2025-24655
WI
Wishlist
PickPlugins
7.1
0%
Apr 17WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32646
QA
Question Answer
PickPlugins
7.1
0%
Apr 17WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-32647
QA
Question Answer
PickPlugins
8.8
0%
Apr 17WordPress Question Answer plugin <= 1.2.73 - PHP Object Injection vulnerability
CVE-2025-32618
WI
Wishlist
PickPlugins
8.5
1%
Apr 11WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability
CVE-2025-32144
JB
Job Board Manager
PickPlugins
8.8
1%
Apr 11WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerability
CVE-2025-32143
AC
Accordion
PickPlugins
8.8
1%
Apr 11WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerability
CVE-2025-32272
WI
Wishlist
PickPlugins
4.3
0%
Apr 4WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-30889
TS
Testimonial Slider
PickPlugins
8.8
0%
Apr 3WordPress Testimonial Slider plugin <= 2.0.13 - PHP Object Injection vulnerability
CVE-2025-31862
JB
Job Board Manager
PickPlugins
5.3
0%
Apr 1WordPress Job Board Manager Plugin <= 2.1.61 - Broken Access Control vulnerability
CVE-2025-31810
QA
Question Answer
PickPlugins
5.3
0%
Apr 1WordPress Question Answer plugin <= 1.2.73 - Broken Access Control vulnerability
CVE-2024-13469
PT
Pricing Table
Pickplugins
5.4
0%
Feb 28The Pricing Table by PickPlugins plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button Link in all versions up to, and including, 1.12.10 due to…
CVE-2024-13796
PG
Post Grid
Pickplugins
7.5
0%
Feb 28The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.3.6 via the…
CVE-2024-13798
CO
Comboblocks
Pickplugins
5.3
0%
Feb 22The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order creation in all versions up to, and including, 2.3.5
CVE-2024-13408
PG
Post Grid
Pickplugins
8.8
1%
Jan 24The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclusion in all versions up to,…
CVE-2021-4450
PG
Post Grid
Pickplugins
8.8
0%
Oct 16The Post Grid plugin for WordPress is vulnerable to blind SQL Injection via post metadata in versions up to, and including, 2.1.12 due to insufficient escaping on the user…
CVE-2024-44002
TS
Team Showcase
Pickplugins
6.1
0%
Sep 18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Team Showcase team allows Reflected XSS.This issue affects Team…
CVE-2024-45459
PS
Product Slider For Woocommerce
Pickplugins
6.1
0%
Sep 15Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Product Slider for WooCommerce woocommerce-products-slider allows…
CVE-2024-8253
PG
Post Grid
Pickplugins
8.8
9%
Sep 11The Post Grid and Gutenberg Blocks plugin for WordPress is vulnerable to privilege escalation in all versions 2.2.87 to 2.2.90
CVE-2024-6346
CO
Comboblocks
Pickplugins
5.4
0%
Aug 1The Gutenberg Blocks, Page Builder – ComboBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the redirectURL parameter of the Date Countdown widget, in…
CVE-2024-4042
CO
Comboblocks
Pickplugins
5.4
0%
Jun 7The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
CVE-2024-1988
PG
Post Grid
Pickplugins
5.4
0%
Jun 7The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the…
CVE-2024-0881
PG
Post Grid
Pickplugins
5.4
17%
Apr 11The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel WordPress plugin before 2.2.76 does not have proper authorization, resulting in password…
CVE-2023-7072
PG
Post Grid Combo
Pickplugins
7.5
1%
Mar 12The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.2.68 via the 'get_posts'…
CVE-2023-51666
RP
Related Post
Pickplugins
5.4
0%
Feb 1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Related Post allows Stored XSS.This issue affects Related Post:…
CVE-2023-6645
PG
Post Grid Combo
Pickplugins
5.4
0%
Jan 11The Post Grid Combo – 36+ Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom JS parameter in all versions up to, and including,…
CVE-2023-40211
PG
Post Grid Combo
Pickplugins
7.5
2%
Nov 30Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg…
CVE-2023-0166
PS
Product Slider For Woocommerce
Pickplugins
5.4
0%
Feb 13The Product Slider for WooCommerce by PickPlugins WordPress plugin before 1.13.42 does not validate and escape some of its shortcode attributes before outputting them back in a…
CVE-2022-4836
BR
Breadcrumb
Pickplugins
5.4
1%
Feb 6The Breadcrumb WordPress plugin before 1.5.33 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a…
CVE-2022-4693
UV
User Verification
Pickplugins
9.8
2%
Jan 23The User Verification WordPress plugin before 1.0.94 was affected by an Auth Bypass security vulnerability
CVE-2022-0447
PG
Post Grid
Pickplugins
6.4
1%
Apr 11The Post Grid WordPress plugin before 2.1.16 does not sanitise and escape the post_types parameter before outputting it back in the response of the…
CVE-2021-24986
PG
Post Grid
Pickplugins
6.1
1%
Apr 11The Post Grid WordPress plugin before 2.1.16 does not escape the keyword parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in pages…
CVE-2021-24488
PG
Post Grid
Pickplugins
6.1
11%
Aug 2The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages,…
CVE-2021-24300
PS
Product Slider For Woocommerce
Pickplugins
6.1
11%
May 24The slider import search feature of the PickPlugins Product Slider for WooCommerce WordPress plugin before 1.13.22 did not properly sanitised the keyword GET parameter, leading to…
CVE-2021-24283
AC
Accordion
Pickplugins
5.4
1%
May 14The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue
CVE-2020-35939
PG
Post Grid
Pickplugins
8.8
2%
Jan 1PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure…
CVE-2020-35938
TS
Team Showcase
Pickplugins
8.8
2%
Jan 1PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure…