Perfmatters

Products

ProductCVEsExploitedLatest
Perfmatters8–Jul 2, 2026

Exploited and recent CVEs

  • CVE-2026-57671 High 7.1 WordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-13251 High 7.5 Perfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' Parameter 0.9%
  • CVE-2026-4351 High 8.1 Perfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' Parameter 0.4%
  • CVE-2026-4350 High 8.1 Perfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter 0.7%
  • CVE-2023-47874 Medium 5.4 WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access Control 0.4%
  • CVE-2023-47876 High 7.1 WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-47877 Medium 6.5 WordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2023-47875 Medium 5.4 WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF) 0.2%