Skip to content
PPerfmatters
Exploited and recent CVEs
-
CVE-2026-57671
High 7.1
WordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability
0.3%
-
CVE-2026-13251
High 7.5
Perfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' Parameter
0.9%
-
CVE-2026-4351
High 8.1
Perfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' Parameter
0.4%
-
CVE-2026-4350
High 8.1
Perfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter
0.7%
-
CVE-2023-47874
Medium 5.4
WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access Control
0.4%
-
CVE-2023-47876
High 7.1
WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
0.4%
-
CVE-2023-47877
Medium 6.5
WordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)
0.4%
-
CVE-2023-47875
Medium 5.4
WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
0.2%