PatchTheCVE: perfectohttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-2261: Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers withhttps://patchthecve.com/cve/CVE-2020-2261.htmlhttps://patchthecve.com/cve/CVE-2020-2261.htmlWed, 17 Jun 2026 03:12:05 +0000HIGH 8.8: Jenkins Perfecto Plugin 1.17 and earlier executes a command on the Jenkins controller, allowing attackers with Job/Configure permission to run arbitrary commands on the Jenkins controllerCVE-2020-2260: A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permhttps://patchthecve.com/cve/CVE-2020-2260.htmlhttps://patchthecve.com/cve/CVE-2020-2260.htmlWed, 17 Jun 2026 03:12:05 +0000MEDIUM 4.3: A missing permission check in Jenkins Perfecto Plugin 1.17 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified HTTP URL using attacker-specified credentials.CVE-2015-4371: Open redirect vulnerability in the Perfecto module before 7.x-1.2 for Drupal allows remote attackers to redirehttps://patchthecve.com/cve/CVE-2015-4371.htmlhttps://patchthecve.com/cve/CVE-2015-4371.htmlWed, 17 Jun 2026 00:27:10 +0000MEDIUM 5.8: Open redirect vulnerability in the Perfecto module before 7.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in an unspecified parameter.