Community by PeepSo – Download from PeepSo.com

Community by PeepSo – Download from PeepSo.com has 17 disclosed vulnerabilities in the WordSec catalog, reported between 2016 and 2026; all 17 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2024 was the busiest year with 8 disclosures.

The most common weakness is Cross-Site Scripting, behind 7 of the records (41%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor.

Every one of the 17 issues recorded for Community by PeepSo – Download from PeepSo.com has a vendor fix available, so running the current release closes all known holes.

15 independent researchers contributed these findings, most of them (2) reported by Bikram Kharal (themarkib).

Strategic Overview

Avg CVSSMedium

5.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Community by PeepSo – Download from PeepSo.com vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2016-10968

Community by PeepSo – Social Network, Membership, Registration, User Profiles < 1.6.1 - Privilege Escalation

Read the full analysis

Vulnerability Records

17 records


2026-08-19 00:00	Community by PeepSo – Download from PeepSo.com <= 9.0.5.2 - Authenticated (Subscriber+) SQL Injection Community by PeepSo <= 9.0.5.2	`CVE-2026-66668`	6.5 Medium	Ayoub MOUHATTA	Yes
2024-11-20 13:34	Community by PeepSo – Social Network, Membership, Registration, User Profiles, Premium – Mobile App <=7.0.3.0 - Reflected Cross-Site Scripting Community by PeepSo <= 7.0.3.0	`CVE-2024-11447`	6.1 Medium	rajanhoyr	Yes
2024-10-15 00:00	Community by PeepSo <= 6.4.6.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting Community by PeepSo <= 6.4.6.1	`CVE-2024-9873`	5.4 Medium	Bikram Kharal (themarkib)	Yes
2024-09-24 12:05	Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.6.0 - Unauthenticated Full Path Disclosure Community by PeepSo <= 6.4.6.0	`CVE-2024-7426`	5.3 Medium	stealthcopter	Yes
2024-09-09 19:11	Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via content Parameter Community by PeepSo <= 6.4.5.0	`CVE-2024-7618`	4.4 Medium	Tieu Pham Trong Nhan	Yes
2024-09-09 19:04	Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Community by PeepSo <= 6.4.5.0	`CVE-2024-7655`	4.4 Medium	Tieu Pham Trong Nhan	Yes
2024-02-14 00:00	Community by PeepSo <= 6.2.7.0 - Unauthenticated Sensitive Information Disclosure via Log file Community by PeepSo <= 6.2.7.0	`CVE-2024-25923`	6.5 Medium	Joshua Chan	Yes
2024-01-09 00:00	Community by PeepSo <= 6.3.1.1 - Cross-Site Request Forgery to User Post Creation Community by PeepSo <= 6.3.1.1	`CVE-2023-7125`	4.3 Medium	Bikram Kharal (themarkib)	Yes
2024-01-09 00:00	Community by PeepSo <= 6.3.1.1 - Reflected Cross-Site Scripting Community by PeepSo <= 6.3.1.1	`CVE-2024-0187`	6.1 Medium	Erwan LR	Yes
2023-11-24 00:00	Community by PeepSo <= 6.2.6.0 - Reflected Cross-Site Scripting Community by PeepSo <= 6.2.6.0	`CVE-2023-48746`	6.1 Medium	Phd	Yes

Showing 1–10 of 17 reports