Vulnerabilities in Perfmatters
8 resultsCVE-2026-13251HIGHPerfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' ParameterEPSS 0.8%CVE-2026-4350HIGHPerfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' ParameterEPSS 0.7%CVE-2023-47876HIGHWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-47874MEDIUMWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access ControlEPSS 0.4%CVE-2026-4351HIGHPerfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' ParameterEPSS 0.4%CVE-2023-47877MEDIUMWordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-47875MEDIUMWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%CVE-2026-57671HIGHWordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%