WordPress plugin
Community by PeepSo – Download from PeepSo.com security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 17 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium15
- Low0
All Community by PeepSo – Download from PeepSo.com vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.5 | Authenticated (Subscriber+) SQL Injection ≤9.0.5.2Update to 9.0.5.3 | CVE-2026-66668 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤7.0.3.0Update to 7.0.4.0 | CVE-2024-11447 | |
| Medium5.4 | Authenticated (Subscriber+) Stored Cross-Site Scripting ≤6.4.6.1Update to 6.4.6.2 | CVE-2024-9873 | |
| Medium5.3 | Unauthenticated Full Path Disclosure ≤6.4.6.0Update to 6.4.6.1 | CVE-2024-7426 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting via content Parameter ≤6.4.5.0Update to 6.4.6.0 | CVE-2024-7618 | |
| Medium4.4 | Authenticated (Administrator+) Stored Cross-Site Scripting ≤6.4.5.0Update to 6.4.6.0 | CVE-2024-7655 | |
| Medium6.5 | Unauthenticated Sensitive Information Disclosure via Log file ≤6.2.7.0Update to 6.2.7.1 | CVE-2024-25923 | |
| Medium4.3 | Cross-Site Request Forgery to User Post Creation ≤6.3.1.1Update to 6.3.1.2 | CVE-2023-7125 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤6.3.1.1Update to 6.3.1.2 | CVE-2024-0187 | |
| Medium6.1 | Reflected Cross-Site Scripting ≤6.2.6.0Update to 6.2.7.0 | CVE-2023-48746 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤6.2.2.0Update to 6.2.3.0 | CVE-2023-47850 | |
| Medium4.3 | Cross-Site Request Forgery via delete ≤6.1.6.0Update to 6.2.0.0 | CVE-2023-39925 | |
| Medium4.3 | Cross-Site Request Forgery to Field Duplication ≤6.0.9.0Update to 6.1.0.0 | CVE-2023-32092 | |
| Medium5.3 | Missing Authorization to Sensitive Information Exposure ≤6.0.9.0Update to 6.1.0.0 | CVE-2023-27630 | |
| High8.1 | Cross-Site Request Forgery leading to Plugin/Subscription Deletion ≤6.0.2.0Update to 6.0.3.0 | CVE-2023-25967 | |
| Medium5.4 | Cross Site Request Forgery ≤6.0.2.0Update to 6.0.3.0 | CVE-2022-41633 | |
| High8.8 | Privilege Escalation ≤1.6.0Update to 1.6.1 | CVE-2016-10968 |
- Medium6.5Authenticated (Subscriber+) SQL Injection
≤9.0.5.2Update to 9.0.5.3
- Medium6.1Reflected Cross-Site Scripting
≤7.0.3.0Update to 7.0.4.0
- Medium5.4Authenticated (Subscriber+) Stored Cross-Site Scripting
≤6.4.6.1Update to 6.4.6.2
- Medium5.3Unauthenticated Full Path Disclosure
≤6.4.6.0Update to 6.4.6.1
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via content Parameter
≤6.4.5.0Update to 6.4.6.0
- Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting
≤6.4.5.0Update to 6.4.6.0
- Medium6.5Unauthenticated Sensitive Information Disclosure via Log file
≤6.2.7.0Update to 6.2.7.1
- Medium4.3Cross-Site Request Forgery to User Post Creation
≤6.3.1.1Update to 6.3.1.2
- Medium6.1Reflected Cross-Site Scripting
≤6.3.1.1Update to 6.3.1.2
- Medium6.1Reflected Cross-Site Scripting
≤6.2.6.0Update to 6.2.7.0
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤6.2.2.0Update to 6.2.3.0
- Medium4.3Cross-Site Request Forgery via delete
≤6.1.6.0Update to 6.2.0.0
- Medium4.3Cross-Site Request Forgery to Field Duplication
≤6.0.9.0Update to 6.1.0.0
- Medium5.3Missing Authorization to Sensitive Information Exposure
≤6.0.9.0Update to 6.1.0.0
- High8.1Cross-Site Request Forgery leading to Plugin/Subscription Deletion
≤6.0.2.0Update to 6.0.3.0
- Medium5.4Cross Site Request Forgery
≤6.0.2.0Update to 6.0.3.0
- High8.8Privilege Escalation
≤1.6.0Update to 1.6.1
Community by PeepSo – Download from PeepSo.com: common questions
Does Community by PeepSo – Download from PeepSo.com have known vulnerabilities?
Yes. VulnCrest Radar lists 17 known vulnerabilities in Community by PeepSo – Download from PeepSo.com: 2 high, 15 medium. None are known to affect version null.
How do I check which version of Community by PeepSo – Download from PeepSo.com I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Community by PeepSo – Download from PeepSo.com vulnerability?
CVE-2026-66668, published Aug 19, 2026: Community by PeepSo – Download from PeepSo.com <= 9.0.5.2 - Authenticated (Subscriber+) SQL Injection. Severity: Medium (CVSS 6.5).
Is any Community by PeepSo – Download from PeepSo.com vulnerability listed in CISA KEV?
No. None of the known Community by PeepSo – Download from PeepSo.com vulnerabilities is currently listed in the CISA KEV catalog.