WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bdthemes-prime-slider-lite
Published
2024-04-19
Title
Prime Slider – Addons For Elementor < 3.14.1 - Contributor+ Stored Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2024-05-07
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2024-05-22
Title
Prime Slider < 3.14.2 - Contributor+ Stored XSS via Pagepiling Widget
Slug
bdthemes-prime-slider-lite
Published
2024-06-06
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget
Slug
bdthemes-prime-slider-lite
Published
2024-11-06
Title
Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider < 3.15.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget
Slug
bdthemes-prime-slider-lite
Published
2025-01-22
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.16.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2025-12-17
Title
Prime Slider – Addons for Elementor < 4.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
bdthemes-prime-slider-lite
Published
2025-12-13
Title
Prime Slider – Addons For Elementor < 4.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
bdthemes-prime-slider-lite
Published
2026-04-07
Title
Prime Slider < 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter
Slug
bdthemes-prime-slider-lite
Published
2026-08-08
Title
BdThemes Multiple Plugins - XSS via 'display_id' from Sigmative API
Slug
bdthemes-prime-slider-lite
Published
2026-10-07
Title
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons < 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2026-10-13
Title
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons < 4.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2026-10-27
Title
Prime Slider < 4.7.3 - Unauthenticated Stored XSS via Comment Content
Slug
bdvs-password-reset
Published
2025-08-28
Title
Password Reset with Code < 0.0.17 - Insecure Password Reset Code Creation
Slug
be-popia-compliant
Published
2022-03-30
Title
Be POPIA Compliant < 1.1.6 - Unauthenticated Sensitive Information Exposure
Slug
be-rest-endpoints
Published
2026-09-10
Title
BE REST Endpoints <= 1.0.0 - Unauthenticated Stored XSS and Widget Manipulation
Slug
be-shortcodes
Published
2024-11-08
Title
Be Shortcodes <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beacon-by
Published
2025-05-07
Title
Beacon Lead Magnets and Lead Capture < 1.5.9 - Cross-Site Request Forgery
Slug
beacon-by
Published
2025-01-06
Title
Beacon Lead Magnets and Lead Capture < 1.5.8 - Reflected Cross-Site Scripting
Slug
beacon-for-helpscout
Published
2024-11-08
Title
Beacon For Help Scout <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beaf-before-and-after-gallery
Published
2024-04-12
Title
BEAF < 4.5.5 - Cross-Site Request Forgery to Notice Dismissal
Slug
beaf-before-and-after-gallery
Published
2025-05-07
Title
BEAF < 4.6.11 - Authenticated (Admin+) Arbitrary File Upload
Slug
beaf-before-and-after-gallery
Published
2026-06-23
Title
BEAF < 4.7.1 - Admin+ Stored XSS via Widget Shortcode Field
Slug
beaf-before-and-after-gallery
Published
2026-08-31
Title
BEAF < 4.7.19 - Author+ Stored XSS via After Label
Slug
beaf-before-and-after-gallery
Published
2026-08-31
Title
BEAF < 4.7.19 - Author+ Stored XSS via Before Label