پارسی دیت – Parsi Date

پارسی دیت – Parsi Date has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 3 are fixed as of October 2026. Their average CVSS score is 6.2, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high.

The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).

Every one of the 3 issues recorded for پارسی دیت – Parsi Date has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. پارسی دیت – Parsi Date is installed on roughly 100,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all پارسی دیت – Parsi Date vulnerabilities before they are exploited.

Highest severity on recordCVSS 7.2CVE-2026-96836

پارسی دیت – Parsi Date <= 6.3 - Unauthenticated Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records


2026-09-24 00:00	پارسی دیت – Parsi Date <= 6.3 - Unauthenticated Stored Cross-Site Scripting پارسی دیت <= 6.3	`CVE-2026-96836`	7.2 High	neurotx	Yes
2024-11-25 20:48	Parsi Date <= 5.1.1 - Reflected Cross-Site Scripting via add_query_arg Parameter پارسی دیت <= 5.1.1	`CVE-2024-11032`	6.1 Medium	vgo0	Yes
2023-01-23 00:00	Parsi Date <= 4.0.1 - Reflected Cross-Site Scripting پارسی دیت <= 4.0.1	`N/A`	5.4 Medium	Anonymous	Yes

Showing 1–3 of 3 reports

Latestv6.4

پارسی دیت – Parsi Date

Author

Morteza Geransayeh

4.6(130)

92/100

Last Updated

2026-09-23 (1mo ago)

Active Installs

100,000+

Downloads

1,548,474

Requires WP

5.3+

Requires PHP

7.4+

Tested up to

WP 7.1.3

Created

2014-01-08 (13y ago)

ParsiDate is a powerful plugin developed by Persian contributors to enhance the WordPress experience for Farsi users. It provides full support for the Shamsi (Jalali) calendar across the WordPress dashboard and front-end, fixes character display issues, and improves Right-to-Left (RTL) compatibility. With seamless integration into core features and popular plugins like WooCommerce and Gravity Forms, ParsiDate makes managing Persian websites easier and more professional. Key Features: Date & Calendar Functionality Shamsi (شمسی) Calendar – Complete Solar Hijri calendar support Date Conversion – Automatic conversion throughout WordPress Archive Widgets – Shamsi date-based post archives Calendar Widget – Interactive Persian calendar widget Permalink Support – Shamsi dates in custom permalinks Editor & Admin Integration Gutenberg Support – Shamsi date picker in Block Editor ACF Integration – Persian date field type for Advanced Custom Fields Admin Dates – Shamsi dates throughout WordPress admin dashboard Content Dates – Automatic Persian dates in posts, pages, comments, and archives Commerce & E-commerce WooCommerce Ready – Full WooCommerce (ووکامرس) compatibility with Persian dates Product Support – Persian dates for orders, products, and customer data Support for Iranian payment gateways with ParsiGate addon Bank gateways: Mellat, Parsian, Pasargad, Sadaad, Melli, Behpardakht, Asan Pardakht, Saman, Saderat, Eghtesad Novin, Iran Kish, Sepehr Installment gateways: SnappPay, Tara, Digipay, Azki Intermediary gateways: Zibal, Zarinpal, PayPing, Aghayepardakht Test gateway for simulating purchases without a bank account Text & Character Processing Arabic to Persian – Automatic character conversion (ي/ك to ی/ک) Number Localization – Convert Eastern Arabic and Latin numerals Full RTL Support – Complete right-to-left text direction optimization TinyMCE Adjustments – RTL-optimized WordPress editor Performance Lightweight – Minimal resource usage and fast performance Efficient – Optimized code for production environments WP-Planet Widget – Integration with WP-Planet.ir

View on WordPress.org