Exposure of Perfmatters

Performance, WordPress plugins

19

exposure score

17,438

sites use

0

exploited

0

critical

CVEs

9 results

CVE-2026-13251HIGHPerfmatters <= 2.6.4 - Unauthenticated Arbitrary File Read via 's' ParameterEPSS 0.9%CVE-2026-4350HIGHPerfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' ParameterEPSS 0.7%CVE-2023-47876HIGHWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-4351HIGHPerfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' ParameterEPSS 0.4%CVE-2023-47874MEDIUMWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access ControlEPSS 0.4%CVE-2023-47877MEDIUMWordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-56047HIGHWordPress perfmatters plugin <= 2.6.3 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57671HIGHWordPress perfmatters plugin <= 2.6.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-47875MEDIUMWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%