VendorsThimPresswp_pipesall versions
Vulnerabilities

ThimPress WP Pipes

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2025-28979
WordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability
Published 2025-08-14 · Modified
9.8EPSS 0.005
CVE-2025-28982
WordPress WP Pipes plugin <= 1.4.3 - SQL Injection Vulnerability
Published 2025-07-16 · Modified
9.8EPSS 0.004
CVE-2025-48267
WordPress WP Pipes plugin <= 1.4.2 - Arbitrary File Deletion Vulnerability
Published 2025-06-09 · Modified
9.1EPSS 0.005
CVE-2025-60227
WordPress WP Pipes plugin <= 1.4.3 - Arbitrary File Deletion vulnerability
Published 2025-10-22 · Modified
8.6EPSS 0.005
CVE-2022-45355
WordPress WP Pipes Plugin <= 1.33 is vulnerable to SQL Injection (SQLi)
Published 2023-03-29 · Modified
8.2EPSS 0.006
CVE-2025-28977
WordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability
Published 2025-08-20 · Modified
7.1EPSS 0.002
CVE-2025-47664
WordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability
Published 2025-05-07 · Modified
6.5EPSS 0.002
CVE-2023-40009
WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
Published 2023-10-03 · Modified
6.5EPSS 0.002
CVE-2024-12283
WP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter
Published 2024-12-11 · Analyzed
6.1EPSS 0.004