PeepSo
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Community by PeepSo | 5 | – | Aug 19, 2026 |
| Community by PeepSo – Download from PeepSo.com | 5 | – | Nov 21, 2024 |
| Community by PeepSo – Social Network, Membership, Registration, User Profiles | 5 | – | Jan 31, 2024 |
| Download Community by PeepSo | 1 | – | Nov 22, 2023 |
| PeepSo | 1 | – | Oct 10, 2026 |
| PeepSo Core: File Uploads | 1 | – | May 14, 2025 |
| PeepSo Core: Groups | 1 | – | Jul 3, 2025 |
Exploited and recent CVEs
- CVE-2026-40805 WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability 0.4%
- CVE-2026-66668 WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability 0.4%
- CVE-2024-9017 PeepSo Core: Groups <= 6.4.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Description 0.2%
- CVE-2024-8988 PeepSo Core: File Uploads <= 6.4.6.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via file_download 0.3%
- CVE-2024-11447 Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <=7.0.3.0 - Reflected Cross-Site Scripting 0.6%
- CVE-2024-9873 Community by PeepSo <= 6.4.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting 0.3%
- CVE-2024-7426 Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.6.0 - Unauthenticated Full Path Disclosure 0.5%
- CVE-2024-7618 Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via content Parameter 0.3%
- CVE-2024-7655 Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting 0.3%
- CVE-2024-31251 WordPress Community by PeepSo plugin <= 6.3.1.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-25923 WordPress Community by PeepSo plugin <= 6.2.7.0 - Sensitive Data Exposure via Log File vulnerability 0.4%
- CVE-2023-27630 WordPress Community by PeepSo plugin <= 6.0.9.0 - Server Information Disclosure 0.5%
- CVE-2024-22158 WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS) 0.3%
- CVE-2023-48746 WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-47850 WordPress Community by PeepSo Plugin <= 6.2.2.0 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-39925 WordPress Community by PeepSo Plugin <= 6.1.6.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-32092 WordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2023-25967 WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.3%
- CVE-2022-41633 WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%