SecAlerts
p

peepso

Security Risk Profile

43
/100
medium

Security Risk Score

Comprehensive risk assessment based on 21 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from September 16, 2019 to present

21
Total CVEs
8
Critical+High
0
Exploited
3
Unpatched

Threat Assessment

Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
43/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days

Severity Distribution

Critical
0
High
8
Medium
13
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
8

Age Distribution

Common Weaknesses (CWE)

1
XSS
9
2
CSRF
6
3
Infoleak
2
4
Path Traversal
1

Most Affected Products

1. PeepSo PeepSo WordPress13
2. PeepSo Community by PeepSo3
3. PeepSo Community2
4. PeepSo PeepSo1
5. PeepSo Core: Groups1

Recent Vulnerabilities

See more →
CVE-2026-40805
CVSS 7.7high

WordPress PeepSo plugin <= 9.0.5.4 - Arbitrary File Deletion vulnerability

Oct 10, 2026🔧 No Patch
CVE-2024-9017
CVSS 7.2high

PeepSo Core: Groups <= 6.4.6.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Group Description

Jul 3, 2025🔧 No Patch
CVE-2024-8988
CVSS 5.3medium

PeepSo Core: File Uploads <= 6.4.6.0 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Exposure via file_download

May 14, 2025🔧 No Patch
CVE-2024-11447
CVSS 6.1medium

Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <=7.0.3.0 - Reflected Cross-Site Scripting

Nov 21, 2024🔧 No Patch
CVE-2024-9873
CVSS 5.4EPSS 0%medium

Community by PeepSo <= 6.4.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting

Oct 16, 2024🔧 No Patch
CVE-2024-7426
CVSS 5.3EPSS 0%medium

Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.6.0 - Unauthenticated Full Path Disclosure

Sep 25, 2024🔧 No Patch
CVE-2024-7618
CVSS 4.8EPSS 0%medium

Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via content Parameter

Sep 10, 2024🔧 No Patch
CVE-2024-7655
CVSS 4.8EPSS 0%medium

Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Sep 10, 2024🔧 No Patch
CVE-2024-31251
CVSS 4.3EPSS 0%medium

WordPress Community by PeepSo plugin <= 6.3.1.1 - Cross Site Request Forgery (CSRF) vulnerability

Apr 12, 2024
CVE-2024-25923
CVSS 5.3medium

WordPress Community by PeepSo plugin <= 6.2.7.0 - Sensitive Data Exposure via Log File vulnerability

Mar 28, 2024

Monitor peepso in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.