What’s Vulnerable › Products

ThimPress WP Pipes vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your ThimPress WP Pipes version is affected

Latest ThimPress WP Pipes vulnerabilities

• CVE-2025-60227 — WordPress WP Pipes plugin <= 1.4.3 - Arbitrary File Deletion vulnerability (CVSS 8.6)
• CVE-2025-28977 — WordPress WP Pipes Plugin <= 1.4.3 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.1)
• CVE-2025-28979 — WordPress WP Pipes <= 1.4.3 - Local File Inclusion Vulnerability (CVSS 9.8)
• CVE-2025-28982 — WordPress WP Pipes plugin <= 1.4.3 - SQL Injection Vulnerability (CVSS 9.8)
• CVE-2025-48267 — WordPress WP Pipes plugin <= 1.4.2 - Arbitrary File Deletion Vulnerability (CVSS 9.1)
• CVE-2025-47664 — WordPress WP Pipes <= 1.4.2 - Server Side Request Forgery (SSRF) Vulnerability (CVSS 6.5)
• CVE-2024-12283 — WP Pipes <= 1.4.1 - Reflected Cross-Site Scripting via x1 Parameter (CVSS 6.1)
• CVE-2023-40009 — WordPress WP Pipes Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 6.5)
• CVE-2022-45355 — WordPress WP Pipes Plugin <= 1.33 is vulnerable to SQL Injection (SQLi) (CVSS 7.2)