Pricing
Case studies
Login
Start trial
Post Grid and Gutenberg Blocks
PickPlugins
Developer
N/A
Latest version
N/A
Installations
N/A
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
1 present
26 fixed
11 Mitigation rules
Insecure Direct Object References (IDOR) vulnerability
<= 2.3.19
Dec 3, 2025
Broken Access Control vulnerability
<= 2.3.17
Oct 4, 2025
Broken Access Control vulnerability
<= 2.3.17
Oct 4, 2025
PHP Object Injection Vulnerability
<= 2.3.11
Aug 6, 2025
Unauthenticated User Information Exposure vulnerability
<= 2.3.6
Feb 27, 2025
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 2.2.92
Feb 21, 2025
Unauthenticated Paid Order Creation vulnerability
<= 2.3.5
Feb 21, 2025
Unauthenticated Privilege Escalation vulnerability
2.2.85-2.3.3
Jan 14, 2025
Cross Site Scripting (XSS) vulnerability
<= 2.2.93
Oct 24, 2024
Cross Site Scripting (XSS) vulnerability
<= 2.2.89
Sep 27, 2024
Authenticated (Subscriber+) Privilege Escalation vulnerability
<= 2.2.90
Sep 10, 2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block vulnerability
<= 2.2.87
Aug 14, 2024
Cross Site Scripting (XSS) vulnerability
<= 2.2.86
Aug 7, 2024
Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget vulnerability
<= 2.2.85a
Aug 1, 2024
Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
<= 2.2.80
May 21, 2024
Sensitive Data Exposure via API vulnerability
<= 2.2.78
Apr 22, 2024
Unauthenticated Password Protected Posts Access vulnerability
< 2.2.76
Apr 15, 2024
Reflected Cross Site Scripting (XSS) vulnerability
<= 2.2.74
Mar 28, 2024
Information Exposure via get_posts API Endpoint vulnerability
<= 2.2.68
Mar 12, 2024
Authenticated Cross-Site Scripting vulnerability
<= 2.2.64
Dec 15, 2023
Sensitive Data Exposure vulnerability
<= 2.2.50
Aug 11, 2023
Reflected Cross-Site Scripting (XSS) vulnerability
<= 2.1.15
Mar 15, 2022
Reflected Cross-Site Scripting (XSS) vulnerability
<= 2.1.15
Mar 15, 2022
PHP Object Injection vulnerability
<= 2.0.72
Oct 5, 2020
Authenticated Stored Cross-Site Scripting (XSS) vulnerability
<= 2.0.72
Oct 5, 2020
Arbitrary File Deletion
<= 2.0.12
Nov 8, 2016
File Deletion Vulnerability
<= 2.0.11
Nov 8, 2016