TI-2026-41495 CVE-2026-57671 · GHSA-6fv7-2mhh-75mr
WordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Unauthenticated Cross Site Scripting (XSS) in perfmatters <= 2.6.4 versions.
Vulnerabilities
8 records
TI-2026-11255 CVE-2026-13251 · GHSA-8456-6w7p-xg3h
Perfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' Parameter
Priority MEDIUM 41
The Perfmatters plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.6.4 via the 's' parameter.
TI-2026-03787 CVE-2026-4351 · GHSA-9m4j-jrjw-j2xh
Perfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' Parameter
Priority LOW 35
The Perfmatters plugin for WordPress is vulnerable to arbitrary file overwrite via path traversal in all versions up to, and including, 2.5.9.
TI-2026-03786 CVE-2026-4350 · GHSA-7hmf-75fm-xr24
Perfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter
Priority LOW 38
The Perfmatters plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in all versions up to, and including, 2.5.9.1.
TI-2023-25978 CVE-2023-47874 · GHSA-5566-x4r3-96jr
WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access Control
Priority MEDIUM 40
Missing Authorization vulnerability in Perfmatters.This issue affects Perfmatters: from n/a through 2.1.6.
TI-2023-25980 CVE-2023-47876 · GHSA-6wrg-hx4g-prww
WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Perfmatters allows Reflected XSS.This issue affects Perfmatters: from n/a through 2.1.6.
TI-2023-25981 CVE-2023-47877 · GHSA-hvwc-2mrx-9ggw
WordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Perfmatters allows Stored XSS.This issue affects Perfmatters: from n/a before 2.2.0.
TI-2023-25979 CVE-2023-47875 · GHSA-cvv4-6q3f-p9gx
WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Perfmatters allows Cross Site Request Forgery.This issue affects Perfmatters: from n/a through 2.1.6.