WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ba-book-everything
Published
2024-09-23
Title
BA Book Everything < 1.6.21 - Unauthenticated Arbitrary User Password Reset
Slug
ba-book-everything
Published
2024-09-30
Title
BA Book Everything < 1.6.21 - Reflected Cross-Site Scripting
Slug
ba-book-everything
Published
2025-12-18
Title
BA Book Everything < 1.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode
Slug
ba-book-everything
Published
2026-01-08
Title
BA Book Everything < 1.8.17 - Missing Authorization
Slug
ba-plus-before-after-image-slider-free
Published
2024-01-16
Title
BA Plus <= 1.0.3 - Reflected Cross-Site Scripting
Slug
babelz
Published
2024-07-11
Title
BabelZ – Google Translate Widget <= 1.1.5 - CSRF to Stored XSS
Slug
back-button-widget
Published
2023-12-26
Title
Back Button Widget < 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
back-button-widget
Published
2025-05-19
Title
Back Button Widget < 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
back-in-stock-notifier-for-woocommerce
Published
2024-05-07
Title
Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro < 5.3.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
back-link-tracker
Published
2024-10-18
Title
Back Link Tracker <= 1.0.0 - Cross-Site Request Forgery to SQL Injection
Slug
back-to-the-top-button
Published
2023-10-02
Title
Back To The Top Button < 2.1.7 - Admin+ Stored XSS
Slug
backend-designer
Published
2024-04-16
Title
Backend Designer < 1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
background-animation-blocks
Published
2025-01-16
Title
Background animation blocks <= 2.1.5 - Unauthenticated Local File Inclusion
Slug
background-control
Published
2025-01-13
Title
Background Control <= 1.0.5 - Cross-Site Request Forgery to Arbitrary File Deletion
Slug
background-music
Published
2014-08-01
Title
background-music 1.0 - jPlayer.swf XSS
Slug
background-takeover
Published
2018-04-06
Title
WP Background Takeover <= 4.1.4 - Directory Traversal
Slug
backlink-monitoring-manager
Published
2024-12-19
Title
Backlink Monitoring Manager <= 0.1.3 - Reflected XSS
Slug
backtotop
Published
2025-03-11
Title
Back To Top <= 2.0 - Cross-Site Request Forgery
Slug
backup
Published
2016-02-15
Title
Backup Guard < 1.0.3 - Authenticated Arbitrary File Upload
Slug
backup
Published
2017-08-24
Title
BackupGuard < 1.1.47 - Authenticated Cross-Site Scripting (XSS)
Slug
backup
Published
2021-02-18
Title
Backup Guard < 1.6.0 - Authenticated Arbitrary File Upload
Slug
backup
Published
2020-07-30
Title
JetBackup < 1.4.1 - Subscriber+ Arbitrary Backup Location Update
Slug
backup
Published
2020-07-30
Title
JetBackup < 1.4.1 - Subscriber+ Sensitive Information Disclosure
Slug
backup
Published
2020-07-16
Title
JetBackup < 1.4.0 - Arbitrary File Upload via CSRF
Slug
backup
Published
2022-10-27
Title
JetBackup < 1.6.9.1 - Admin+ Stored XSS