WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
beaver-builder-lite-version
Published
2025-12-01
Title
Beaver Builder – WordPress Page Builder < 2.9.4.1 - Missing Authorization to Authenticated (Contributor+) Global Preset Modification
Slug
beaver-builder-lite-version
Published
2025-12-03
Title
Beaver Builder – WordPress Page Builder < 2.9.4.1 - Missing Authorization to Authenticated (Contributor+) Builder Status Tampering
Slug
beaver-builder-lite-version
Published
2025-12-08
Title
Beaver Builder – WordPress Page Builder < 2.9.4.1 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
beaver-builder-lite-version
Published
2025-12-22
Title
Beaver Builder – WordPress Page Builder < 2.9.4.2 - Subscriber+ Arbitrary Beaver Builder Post Update
Slug
beaver-builder-lite-version
Published
2026-01-21
Title
Beaver Builder < 2.9.4.2 - Contributor+ Remote Code Execution
Slug
beaver-builder-lite-version
Published
2026-02-10
Title
Beaver Builder Page Builder – Drag and Drop Website Builder < 2.10.0.6 - Authenticated (Custom+) Missing Authorization to Stored Cross-Site Scripting via Global Settings
Slug
beaver-builder-lite-version
Published
2026-04-07
Title
Beaver Builder Page Builder – Drag and Drop Website Builder < 2.10.1.2 - Authenticated (Author+) Stored Cross-Site Scripting via 'settings[js]'
Slug
beaver-builder-lite-version
Published
2026-03-23
Title
Beaver Builder < 2.10.1.5 - Authenticated (Contributor+) SQL Injection
Slug
beaver-themer
Published
2024-04-03
Title
Beaver Themer < 1.4.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via shortcode
Slug
beaver-themer
Published
2024-04-06
Title
Beaver Themer < 1.4.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via shortcode
Slug
bebetter-social-icons
Published
2024-11-08
Title
BeBetter Social Icons <= 2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
becustom
Published
2022-11-14
Title
Becustom < 1.0.5.3 - Settings Update via CSRF
Slug
beds24-online-booking
Published
2024-01-08
Title
Beds24 Online Booking < 2.0.25 - Contributor+ Stored XSS
Slug
beds24-online-booking
Published
2024-01-31
Title
Beds24 Online Booking < 2.0.24 - Authenticated(Administrator+) Stored Cross-Site Scripting
Slug
beds24-online-booking
Published
2024-11-01
Title
Beds24 Online Booking < 2.0.26 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
beds24-online-booking
Published
2024-11-20
Title
Beds24 Online Booking < 2.0.28 - Contributor+ Stored XSS via beds24-link Shortcode
Slug
beds24-online-booking
Published
2025-04-04
Title
Beds24 Online Booking < 2.0.29 - Contributor+ Local File Inclusion
Slug
beds24-online-booking
Published
2025-04-01
Title
Beds24 Online Booking < 2.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beds24-online-booking
Published
2025-05-07
Title
Beds24 Online Booking < 2.0.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bee-layer-slider
Published
2025-03-11
Title
Bee Layer Slider <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bee-quick-gallery
Published
2025-08-01
Title
Image Gallery <= 1.0.0 - Reflected Cross-Site Scripting
Slug
beefbind
Published
2014-07-29
Title
Beefbind - BeEF RCE Plugin
Slug
beek-widget-extention
Published
2024-10-24
Title
Beek Widget Extention <= 0.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
beepress
Published
2024-02-26
Title
BeePress <= 6.9.8 - Cross-Site Request Forgery via beepress-pro.php
Slug
beer-recipes
Published
2014-08-01
Title
Beer Recipes 1.0 - XSS