CVE-2025-47664 WordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2...

CVE-2025-47664 WordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2...

WordPress plugin WP Pipes 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue...

CVE-2025-47664: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in ThimPress WP Pipes allows Server Side Request Forgery. This issue affects WP Pipes: from n/a through 1.4.2...

PT-2025-20214

Name of the Vulnerable Software and Affected Versions ThimPress WP Pipes versions 1.4.2 and earlier Description The issue is a Server-Side Request Forgery SSRF vulnerability, which allows an attacker to perform unauthorized actions on the server. This can lead to various security issues, includin...

CVE-2022-45355

Auth. admin+ SQL Injection SQLi vulnerability in ThimPress WP Pipes plugin = 1.33 versions...

CVE-2024-12283

The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘x1’ parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-12283 WP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter

The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘x1’ parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-12283 WP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter

The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘x1’ parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2024-12283

CVE-2024-12283 refers to the WP Pipes plugin for WordPress. It allows a Reflected Cross-Site Scripting (XSS) via the x1 parameter in all versions up to and including 1.4.1 due to insufficient input sanitization and output escaping. The vulnerability is exploitable by unauthenticated attackers who...

CVE-2024-12283: Improper Neutralization of Input During Web Page Generation

The WP Pipes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘x1’ parameter in all versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in...

CVE-2023-40009

Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Pipes plugin = 1.4.0 versions...

CVE-2023-40009

Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Pipes plugin = 1.4.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Pipes plugin = 1.4.0 versions...

CVE-2023-40009 WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Pipes plugin = 1.4.0 versions...

CVE-2023-40009

The CVE-2023-40009 entry concerns the WordPress WP Pipes plugin (

CVE-2023-40009: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in ThimPress WP Pipes plugin = 1.4.0 versions...

WordPress Plugin WP Pipes Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin WP Pipes...

WP Pipes < 1.4.1 - CSRF

Description The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Pipes Type Plugin Vulnerable versions = 1.4.0 Fixed in 1.4.1 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-40009 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID a9072585c12c Credits Nguyen Xuan Chien Required...