249 matches found
CVE-2026-40805
Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...
EUVD-2026-96541
Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...
CVE-2026-40805 WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability
Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...
CVE-2026-40805
The PeepSo WordPress plugin (versions
PT-2026-109760
Name of the Vulnerable Software and Affected Versions PeepSo versions prior to 9.0.5.5 Description A flaw allows a user with Subscriber privileges to perform arbitrary file deletion on the system. Recommendations Update to version 9.0.5.5 or later...
CVE-2026-40805: Improper Limitation of a Pathname to a Restricted Directory
Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...
CVE-2026-66668
Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...
CVE-2026-66668 WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability
Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...
CVE-2026-66668
CVE-2026-66668 is a Subscriber SQL Injection vulnerability in the Community by PeepSo WordPress plugin, affecting versions ≤ 9.0.5.2 . The vulnerability was discovered by Yukusawa18 and reported via Patchstack. The CVSS 3.1 base score is 8.5 (HIGH) , with a network attack vector, low complexity, ...
CVE-2026-66668 WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability
Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...
EUVD-2026-62376
Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...
WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability
SQL Injection vulnerability discovered by Yukusawa18 in WordPress Plugin Community by PeepSo versions = 9.0.5.2...
CVE-2026-66668: Improper Neutralization of Special Elements used in an SQL Command
Subscriber SQL Injection in Community by PeepSo = 9.0.5.2 versions...
PT-2026-78332
Name of the Vulnerable Software and Affected Versions Community by PeepSo versions prior to 9.0.5.3 Description An issue exists that allows for SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution, potentially allowing unauthorized access to the...
WordPress Community by PeepSo plugin < 6.3.1.2 - User Post Creation via CSRF vulnerability
User Post Creation via CSRF vulnerability discovered by Bikram Kharal in WordPress Plugin Community by PeepSo versions 6.3.1.2...
WordPress Community by PeepSo plugin <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting vulnerability
Authenticated Administrator+ Stored Cross-Site Scripting vulnerability discovered by Tieu Pham Trong Nhan - TechlabCorp in WordPress Plugin Community by PeepSo versions = 6.4.5.0...
WordPress Community by PeepSo plugin < 6.3.1.2 - Reflected XSS vulnerability
Reflected XSS vulnerability discovered by Erwan LR WPScan in WordPress Plugin Community by PeepSo versions 6.3.1.2...
CVE-2016-10968
The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax-save privilege escalation...
CVE-2023-49168
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WordPlus Better Messages – Live Chat for WordPress, BuddyPress, PeepSo, Ultimate Member, BuddyBoss allows Stored XSS.This issue affects Better Messages – Live Chat for WordPress, BuddyPress, PeepSo...