PickPlugins vulnerabilities
76 published CVEs name PickPlugins among the affected products.
- 76Published CVEs76 of them scored
- 14Last 12 monthspublished in the last year
- 5Critical22 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-116392
WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability
PickPlugins · Accordion
High7.2 - CVE-2024-11080
Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection
pickplugins · Post Grid
Critical9.8 - CVE-2026-10207
PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter
pickplugins · PickPlugins Question Answer
High7.5 - CVE-2026-65456
WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability
PickPlugins · Product Slider for WooCommerce
Medium4.3 - CVE-2026-10862
Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field
pickplugins · Accordions
Medium6.4 - CVE-2025-62745
WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability
PickPlugins · Team Showcase
Medium6.5 - CVE-2026-7458
User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint
pickplugins · User Verification by PickPlugins
Critical9.8 - CVE-2026-32497
WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability
PickPlugins · User Verification
Medium5.3 - CVE-2026-25455
WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerability
PickPlugins · Product Slider for WooCommerce
Medium6.5 - CVE-2025-68000
WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability
PickPlugins · Testimonial Slider
Medium6.5