WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bbp-core
Published
2025-12-24
Title
BBP Core < 2.0.0 - Missing Authorization
Slug
bbp-core
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
bbp-members-only
Published
2019-12-26
Title
bbPress Members Only < 1.3.1 - CSRF on Optional Settings page
Slug
bbp-move-topics
Published
2018-03-11
Title
Bbp Move Topics < 1.1.6 - Code Injection & CSRF
Slug
bbp-move-topics
Published
2025-07-16
Title
bbPress Move Topics <= 1.1.6 - Reflected Cross-Site Scripting
Slug
bbp-style-pack
Published
2023-05-30
Title
bbp style pack < 5.5.6 - Reflected XSS
Slug
bbp-style-pack
Published
2023-10-16
Title
bbp style pack < 5.6.8 - Contributor+ Stored XSS
Slug
bbp-style-pack
Published
2026-07-10
Title
bbp style pack < 6.4.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Topic Form Additional Fields
Slug
bbp-toolkit
Published
2023-05-31
Title
bbPress Toolkit <= 1.0.12 - Reflected XSS
Slug
bbp-toolkit
Published
2023-05-31
Title
bbPress Toolkit <= 1.0.12 - Cross-Site Request Forgery
Slug
bbp-topic-count
Published
2025-09-26
Title
bbp topic count <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bbp-voting
Published
2023-01-27
Title
bbPress Voting < 2.1.11.1 - Admin+ Stored XSS
Slug
bbpowerpack
Published
2024-07-24
Title
PowerPack for Beaver Builder < 2.33.1 - Contributor+ Privilege Escalation
Slug
bbpowerpack
Published
2024-08-16
Title
PowerPack for Beaver Builder < 2.37.4 - Reflected Cross-Site Scripting
Slug
bbpress
Published
2014-08-01
Title
bbPress - Multiple Script Malformed Input Path Disclosure
Slug
bbpress
Published
2014-08-01
Title
bbPress - forum.php page Parameter SQL Injection
Slug
bbpress
Published
2016-05-02
Title
bbPress <= 2.5.8 - Stored Cross-Site Scripting (XSS)
Slug
bbpress
Published
2016-07-13
Title
bbPress <= 2.5.9 - Display Name & Avatar Potential Cross-Site Scripting (XSS)
Slug
bbpress
Published
2017-11-13
Title
bbPress <= 2.5.12 - Unauthenticated SQL Injection
Slug
bbpress
Published
2020-05-28
Title
bbPress < 2.6.5 - Unauthenticated Privilege Escalation when New User Registration enabled
Slug
bbpress
Published
2020-05-28
Title
bbPress 2.6-2.6.5 - Authenticated Privilege Escalation via the Super Moderator feature
Slug
bbpress
Published
2020-05-28
Title
bbPress < 2.6.5 - Authenticated Stored Cross-Site Scripting via the forums list table
Slug
bbpress
Published
2019-11-12
Title
bbPress < 2.6.0 - Subscriber+ Stored Cross-Site Scripting via Post Slug
Slug
bbpress
Published
2025-03-04
Title
bbPress < 2.6.12 - Cross-Site Request Forgery to Limited Privilege Escalation
Slug
bbpress
Published
2026-08-31
Title
bbPress < 2.6.15 - Missing Authorization