WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
b-accordion
Published
2026-01-21
Title
B Accordion < 2.0.3 - Contributor+ Information Exposure
Slug
b-banner-slider
Published
2024-11-13
Title
B-Banner Slider <= 1.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
b-blocks
Published
2025-04-04
Title
B Blocks - The ultimate block collection < 2.0.1 - Contributor+ Stored XSS
Slug
b-blocks
Published
2025-08-11
Title
B Blocks < 2.0.7 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Function
Slug
b-blocks
Published
2025-08-14
Title
B Blocks < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
b-blocks
Published
2026-04-16
Title
bBlocks < 2.0.32 - Contributor+ Privilege Escalation
Slug
b-blocks
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
b-blocks
Published
2026-04-23
Title
bBlocks – Essential Gutenberg Blocks & Patterns Collection < 2.0.30 - Missing Authorization
Slug
b-carousel-block
Published
2025-11-04
Title
B Carousel Block – Responsive Image and Content Carousel < 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery
Slug
b-slider
Published
2024-03-28
Title
B Slider - Slider for your block editor < 1.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
b-slider
Published
2025-02-03
Title
B Slider- Gutenberg Slider Block for WP < 1.1.24 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode
Slug
b-slider
Published
2025-08-11
Title
B Slider- Gutenberg Slider Block for WP < 2.0.0 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation
Slug
b-slider
Published
2025-08-14
Title
B Slider - Gutenberg Slider Block for WP < 2.0.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
b-slider
Published
2025-08-14
Title
B Slider - Gutenberg Slider Block for WP < 2.0.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
b-slider
Published
2025-08-26
Title
B Slider < 2.0.0 - Missing Authorization
Slug
b-slider
Published
2026-01-29
Title
B Slider < 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
b-testimonial
Published
2024-12-03
Title
B Testimonial – testimonial plugin for WP < 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
b-tiktok-feed
Published
2025-08-26
Title
Tiktok Feed < 1.0.22 - Missing Authorization
Slug
b-tiktok-feed
Published
2025-12-02
Title
Tiktok Feed < 1.0.24 - Missing Authorization
Slug
b-tiktok-feed
Published
2026-05-26
Title
Feeds for TikTok – Display Video Feeds in Grid Layouts < 1.0.25 - Missing Authorization
Slug
b1-accounting
Published
2025-07-17
Title
B1.lt for WooCommerce < 2.2.58 - Missing Authorization to Authenticated (Subscriber+) Arbitrary SQL Injection
Slug
b1-accounting
Published
2025-07-17
Title
B1.lt for WooCommerce < 2.2.57 - Authenticated (Subscriber+) SQL Injection
Slug
b2bking
Published
2023-06-03
Title
B2BKing < 4.6.20 - Subscriber+ Arbitrary Products Price Update
Slug
b2bking
Published
2025-09-26
Title
B2BKing Premium < 5.4.20 - Unauthenticated Open Redirect
Slug
b2bking-wholesale-for-woocommerce
Published
2026-05-25
Title
B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More < 5.2.10 - Missing Authorization