WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bertha-ai-free
Published
2023-12-27
Title
BERTHA AI Plugin < 1.11.10.8 - Unauthenticated Arbitrary File Upload
Slug
bertha-ai-free
Published
2025-04-17
Title
BERTHA AI < 1.12.11 - Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
bertha-ai-free
Published
2025-05-16
Title
BERTHA AI <= 1.12.11 - Missing Authorization
Slug
bertha-ai-free
Published
2025-11-29
Title
BERTHA AI <= 1.13 - Missing Authorization
Slug
best-addons-for-elementor
Published
2024-11-28
Title
Best Addons for Elementor <= 1.0.5 - Contributor+ Stored XSS
Slug
best-bootstrap-widgets-for-elementor
Published
2024-11-08
Title
best bootstrap widgets for elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
best-css-compiler
Published
2025-01-16
Title
WOW Best CSS Compiler <= 2.0.2 - Reflected Cross-Site Scripting
Slug
best-posts-summary
Published
2025-04-25
Title
Best Posts Summary <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
best-restaurant-menu-by-pricelisto
Published
2023-11-07
Title
Best Restaurant Menu by PriceListo < 1.4.0 - Settings Update via CSRF
Slug
best-restaurant-menu-by-pricelisto
Published
2024-07-22
Title
Best Restaurant Menu by PriceListo < 1.4.2 - Authenticated (Contributor+) SQL Injection
Slug
best-restaurant-menu-by-pricelisto
Published
2024-10-21
Title
Best Restaurant Menu by PriceListo < 1.4.3 - Missing Authorization
Slug
best-restaurant-menu-by-pricelisto
Published
2025-09-05
Title
Best Restaurant Menu by PriceListo <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
best-woocommerce-feed
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
best-woocommerce-feed
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
best-woocommerce-feed
Published
2023-12-28
Title
Product Feed Manager < 7.3.16 - Authenticated (Admin+) Directory Traversal
Slug
best-wp-google-map
Published
2026-01-16
Title
Best-wp-google-map <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'latitude' Shortcode Attribute
Slug
bestbooks
Published
2022-05-17
Title
Bestbooks <= 2.6.3 - Unauthenticated SQLi
Slug
bet-sport-free
Published
2024-12-12
Title
Bet sport Free <= 1.0.0 - Cross-Site Request Forgery
Slug
bet-wc-2018-russia
Published
2024-10-21
Title
Bet WC 2018 Russia <= 2.1 - Reflected Cross-Site Scripting
Slug
betpress
Published
2025-08-25
Title
BetPress <= 1.0.1 Lite - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
better-anchor-links
Published
2024-01-16
Title
Better Anchor Links <= 1.7.5 - Cross-Site Request Forgery via admin/options.php
Slug
better-author-bio
Published
2024-10-14
Title
Better Author Bio <= 2.7.10.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
better-bp-registration
Published
2024-10-14
Title
BuddyPress Better Registration <= 1.6 - Authentication Bypass to Administrator
Slug
better-business-reviews
Published
2026-01-09
Title
Better Business Reviews < 0.1.2 - Missing Authorization
Slug
better-captcha-gravity-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius