WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
b-banner-slider
Published
2024-11-13
Title
B-Banner Slider <= 1.1 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
b-blocks
Published
2025-04-04
Title
B Blocks - The ultimate block collection < 2.0.1 - Contributor+ Stored XSS
Slug
b-blocks
Published
2025-08-11
Title
B Blocks < 2.0.7 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Function
Slug
b-blocks
Published
2025-08-14
Title
B Blocks < 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
b-carousel-block
Published
2025-11-04
Title
B Carousel Block – Responsive Image and Content Carousel < 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery
Slug
b-slider
Published
2024-03-28
Title
B Slider - Slider for your block editor < 1.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
b-slider
Published
2025-02-03
Title
B Slider- Gutenberg Slider Block for WP < 1.1.24 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode
Slug
b-slider
Published
2025-08-11
Title
B Slider- Gutenberg Slider Block for WP < 2.0.0 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation
Slug
b-slider
Published
2025-08-14
Title
B Slider - Gutenberg Slider Block for WP < 2.0.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
b-slider
Published
2025-08-14
Title
B Slider - Gutenberg Slider Block for WP < 2.0.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
b-slider
Published
2025-08-26
Title
B Slider < 2.0.0 - Missing Authorization
Slug
b-testimonial
Published
2024-12-03
Title
B Testimonial – testimonial plugin for WP < 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
b-tiktok-feed
Published
2025-08-26
Title
Tiktok Feed < 1.0.22 - Missing Authorization
Slug
b-tiktok-feed
Published
2025-12-02
Title
Tiktok Feed <= 1.0.23 - Missing Authorization
Slug
b1-accounting
Published
2025-07-17
Title
B1.lt for WooCommerce < 2.2.58 - Missing Authorization to Authenticated (Subscriber+) Arbitrary SQL Injection
Slug
b1-accounting
Published
2025-07-17
Title
B1.lt for WooCommerce < 2.2.57 - Authenticated (Subscriber+) SQL Injection
Slug
b2bking
Published
2023-06-03
Title
B2BKing < 4.6.20 - Subscriber+ Arbitrary Products Price Update
Slug
b2i-investor-tools
Published
2025-05-12
Title
B2i Investor Tools < 1.0.8 - Reflected Cross-Site Scripting
Slug
ba-book-everything
Published
2020-11-12
Title
BA Book Everything < 1.3.25 - Unauthenticated Reflected XSS & XFS
Slug
ba-book-everything
Published
2024-04-15
Title
BA Book Everything < 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ba-book-everything
Published
2024-04-12
Title
BA Book Everything < 1.6.5 - Authenticated (Contributor+) SQL Injection
Slug
ba-book-everything
Published
2024-04-16
Title
BA Book Everything < 1.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ba-book-everything
Published
2024-09-23
Title
BA Book Everything < 1.6.21 - Cross-Site Request Forgery to Email Address Update/Account Takeover
Slug
ba-book-everything
Published
2024-09-23
Title
BA Book Everything < 1.6.21 - Unauthenticated Arbitrary User Password Reset
Slug
ba-book-everything
Published
2024-09-30
Title
BA Book Everything < 1.6.21 - Reflected Cross-Site Scripting