WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
betterdocs
Published
2026-07-24
Title
BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot < 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
betterdocs
Published
2026-08-31
Title
BetterDocs < 4.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Heading 'id' Attribute in Post Content
Slug
betterdocs-pro
Published
2026-05-06
Title
BetterDocs Pro < 3.7.1 - Unauthenticated SQL Injection via Encyclopedia 'limit' Parameter
Slug
betterdocs-pro
Published
2026-06-18
Title
BetterDocs Pro < 3.8.1 - Unauthenticated Local File Inclusion via doc_style
Slug
betterlinks
Published
2021-10-20
Title
BetterLinks < 1.2.6 - Admin+ Stored Cross-Site Scripting
Slug
betterlinks
Published
2023-10-18
Title
BetterLinks < 1.6.1 - Improper Authorization to Data Import and Export
Slug
betterlinks
Published
2024-11-01
Title
BetterLinks < 2.1.8 - Authenticated (Administrator+) SQL Injection
Slug
betterlinks
Published
2026-08-24
Title
BetterLinks < 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Short URL Creation via create_fbs_link AJAX Action
Slug
betteroptin
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
beyondcart
Published
2025-09-10
Title
BeyondCart Connector < 3.0.2 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter
Slug
beyot-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload
Slug
beyot-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
beyot-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates
Slug
bfg-tools-extension-zipper
Published
2026-02-13
Title
BFG Tools – Extension Zipper < 1.0.8 - Authenticated (Administrator+) Path Traversal via 'first_file' Parameter
Slug
bft-autoresponder
Published
2018-12-04
Title
Arigato Autoresponder and Newsletter < 2.5.2 - Authenticated Blind SQL Injection & Multiple XSS
Slug
bft-autoresponder
Published
2023-01-31
Title
Arigato Autoresponder and Newsletter < 2.1.7.2 - Admin+ Stored XSS
Slug
bft-autoresponder
Published
2023-02-02
Title
Arigato Autoresponder and Newsletter < 2.1.7.2 - Contributor+ Stored XSS
Slug
bft-autoresponder
Published
2023-02-06
Title
Arigato Autoresponder and Newsletter < 2.7.1.1 - Unauthenticated Stored XSS
Slug
bft-autoresponder
Published
2023-02-06
Title
Arigato Autoresponder and Newsletter < 2.7.1.1 - Admin+ Stored XSS
Slug
bft-autoresponder
Published
2023-11-16
Title
Arigato Autoresponder and Newsletter < 2.7.2.3 - CSRF
Slug
bft-autoresponder
Published
2024-05-09
Title
Arigato Autoresponder and Newsletter < 2.7.2.4 - Cross-Site Request Forgery
Slug
bft-autoresponder
Published
2025-04-17
Title
Arigato Autoresponder and Newsletter < 2.7.2.5 - Reflected Cross-Site Scripting
Slug
bg-biblie-references
Published
2022-12-17
Title
Bg Bible References <= 3.8.14 - Reflected XSS
Slug
bg-book-publisher
Published
2025-10-21
Title
Bg Book Publisher <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bg-church-memos
Published
2025-09-22
Title
Bg Church Memos <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting