Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

perfmatters — Vulnerabilities & Security Advisories 9

All 9 CVE vulnerabilities found in perfmatters, with AI-generated Chinese analysis, references, and POCs.

Vendor: Perfmatters

CVE IDTitleCVSSSeverityPublished
CVE-2026-57671 WordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-07-02
CVE-2026-13251 Perfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' Parameter CWE-22 7.5 High2026-07-02
CVE-2026-56047 WordPress perfmatters plugin <= 2.6.3 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High2026-06-26
CVE-2026-4351 Perfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' Parameter CWE-22 8.1 High2026-04-10
CVE-2026-4350 Perfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' Parameter CWE-22 8.1 High2026-04-03
CVE-2023-47874 WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access Control CWE-862 5.4 Medium2024-02-29
CVE-2023-47876 WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2023-11-30
CVE-2023-47877 WordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS) CWE-79 6.5 Medium2023-11-30
CVE-2023-47875 WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 5.4 Medium2023-11-30

All 9 known CVE vulnerabilities affecting perfmatters with full Chinese analysis, references, and POCs where available.