Processing Projects

Processing Projects has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; none of them are fixed as of September 2026. Their average CVSS score is 6.8, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Unrestricted Upload Of File With Dangerous Type.

None of the 2 issues recorded for Processing Projects have a published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. Processing Projects is installed on roughly 40 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.9.31.

Strategic Overview

Avg CVSSMedium

6.8/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Processing Projects vulnerabilities before they are exploited.

Most severe open issueCVSS 7.2CVE-2025-32206

Processing Projects <= 1.0.2 - Authenticated (Shop Manager+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

2 records


2025-04-08 00:00	Processing Projects <= 1.0.2 - Authenticated (Shop Manager+) Arbitrary File Upload Processing Projects <= 1.0.2	`CVE-2025-32206`	7.2 High	0xd4rk5id3	No
2025-03-31 00:00	Processing Projects <= 1.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting Processing Projects <= 1.0.2	`CVE-2025-31624`	6.4 Medium	SOPROBRO	No

Showing 1–2 of 2 reports

Plugin Profile

Latestv1.0.2

Processing Projects

Author

LABCAT

4.0(2)

80/100

Last Updated

2019-09-29 (7y ago)

Active Installs

40+

Downloads

2,516

Requires WP

4.9+

Requires PHP

Tested up to

WP 4.9.31

Created

2018-02-24 (9y ago)

This plugin allows you to upload Processing (p5.js) Projects to your WordPress website. The Processing Projects you upload should be in a zip file that contains all the files required to run the project. Uploaded Processing Projects can then be displayed anywhere on your website using the shortcode [pp-shortcode id=”0″]. Make sure to replace “0” in the shortcode with the ID of your project. The shortcode also accepts width and height arguments. This allows you to set the size of the iframe used to display the Processing Project on your website, eg [pp-shortcode id=”0″ width=”960″ height=”500″]. The shortcodes for all the Processing Projects you upload will be displayed on the Processing Projects table for easy access. You can view a live demo of the frontend output of this plugin at www.rocketship.co.nz.

View on WordPress.org