Log in Start free

PickPlugins

Products

ProductCVEsExploitedLatest
Post Grid13–Sep 5, 2026
Job Board Manager9–Sep 26, 2025
Post Grid and Gutenberg Blocks8–Dec 24, 2025
Accordion6–Oct 28, 2026
Wishlist6–Jun 6, 2025
Question Answer3–Apr 17, 2025
Testimonial Slider3–Feb 20, 2026
Product Slider for WooCommerce3–Jul 23, 2026
Team Showcase3–May 25, 2026
Mail Picker2–Dec 13, 2024
PickPlugins Product Designer for WooCommerce2–Nov 21, 2024
Accordions2–Jun 9, 2026
Product Designer2–Nov 1, 2024
User Verification by PickPlugins2–May 2, 2026
Post Grid and Gutenberg Blocks – ComboBlocks1–Jan 15, 2025
ComboBlocks1–Aug 12, 2024
Related Post1–Feb 1, 2024
Related Posts By PickPlugins1–Dec 5, 2024
Related Posts, Inline Related Posts, Contextual Related Posts, Related Content By PickPlugins1–Mar 7, 2025
Tabs & Accordion1–Jun 4, 2024
PickPlugins Question Answer1–Jul 28, 2026
PickPlugins Product Slider for WooCommerce1–May 24, 2021
User profile1–Mar 19, 2024
User Verification1–Mar 25, 2026
Post Grid Combo – 36+ Gutenberg Blocks1–Nov 30, 2023
PickPlugins Pricing Table1–Feb 28, 2025

Exploited and recent CVEs

  • CVE-2026-116392 High 7.2 WordPress Accordion plugin <= 2.3.25 - PHP Object Injection vulnerability 0.3%
  • CVE-2024-11080 Critical 9.8 Post Grid and Gutenberg Blocks – ComboBlocks 2.2.85 - 2.3.32 - Unauthenticated Hook Injection 0.8%
  • CVE-2026-10207 High 7.5 PickPlugins Question Answer <= 1.2.73 - Unauthenticated SQL Injection via 'id' Parameter 0.5%
  • CVE-2026-65456 Medium 4.3 WordPress Product Slider for WooCommerce plugin <= 1.13.62 - Insecure Direct Object References (IDOR) vulnerability 0.3%
  • CVE-2026-10862 Medium 6.4 Accordions <= 2.3.23 - Authenticated (Custom+) Stored Cross-Site Scripting via Accordion Body Field 0.2%
  • CVE-2025-62745 Medium 6.5 WordPress Team Showcase plugin <= 1.22.28 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-7458 Critical 9.8 User Verification by PickPlugins <= 2.0.46 - Unauthenticated Authentication Bypass via OTP Verification REST API Endpoint 0.6%
  • CVE-2026-32497 Medium 5.3 WordPress User Verification plugin <= 2.0.45 - Email Verification Bypass vulnerability 0.2%
  • CVE-2026-25455 Medium 6.5 WordPress Product Slider for WooCommerce plugin <= 1.13.61 - Broken Access Control vulnerability 0.3%
  • CVE-2025-68000 Medium 6.5 WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability 0.4%
  • CVE-2025-68605 Medium 6.5 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63043 Medium 5.3 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability 0.2%
  • CVE-2025-66058 Medium 6.5 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability 0.2%
  • CVE-2025-12374 Critical 9.8 Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account Takeover 0.5%
  • CVE-2025-62929 Medium 6.5 WordPress Testimonial Slider plugin <= 2.0.15 - Broken Access Control vulnerability 0.3%
  • CVE-2025-62924 Medium 6.5 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability 0.3%
  • CVE-2025-53421 Medium 6.5 WordPress Accordion plugin <= 2.3.14 - Broken Access Control vulnerability 0.3%
  • CVE-2025-60162 Medium 6.5 WordPress Job Board Manager Plugin <= 2.1.61 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-58678 Medium 6.5 WordPress Accordion Plugin <= 2.3.15 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-58827 Low 3.8 WordPress Job Board Manager Plugin <= 2.1.61 - Content Injection Vulnerability 0.2%
  • CVE-2025-54007 High 8.8 WordPress Post Grid and Gutenberg Blocks Plugin <= 2.3.11 - PHP Object Injection Vulnerability 0.4%
  • CVE-2025-49324 Medium 5.3 WordPress Job Board Manager plugin <= 2.1.60 - Broken Access Control Vulnerability 0.3%
  • CVE-2025-49075 Medium 6.5 WordPress Wishlist plugin <= 1.0.43 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-24655 High 7.1 WordPress Wishlist Plugin <= 1.0.39 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-32646 High 7.1 WordPress Question Answer plugin <= 1.2.70 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2025-32647 High 8.8 WordPress Question Answer plugin <= 1.2.73 - PHP Object Injection vulnerability 0.5%
  • CVE-2025-32618 High 8.5 WordPress Wishlist plugin <= 1.0.46 - SQL Injection vulnerability 0.5%
  • CVE-2025-32144 High 8.8 WordPress Job Board Manager Plugin <= 2.1.61 - PHP Object Injection vulnerability 1.1%
  • CVE-2025-32143 High 8.8 WordPress Accordion plugin <= 2.3.11 - PHP Object Injection vulnerability 1.1%
  • CVE-2025-32272 Medium 4.3 WordPress Wishlist plugin <= 1.0.46 - Cross Site Request Forgery (CSRF) vulnerability 0.2%