WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
badgeos
Published
2022-08-23
Title
BadgeOS < 3.7.1.3 - Subscriber+ SQLi
Slug
badgeos
Published
2023-04-18
Title
BadgeOS <= 3.7.1.6 - CSRF
Slug
badgeos
Published
2023-07-05
Title
BadgeOS <= 3.7.1.6 - Contributor+ Stored Cross-Site Scripting
Slug
badgeos
Published
2023-07-05
Title
BadgeOS <= 3.7.1.6 - Subscriber+ IDOR
Slug
badgeos
Published
2023-07-05
Title
BadgeOS <= 3.7.1.6 - Missing Authorization in delete_badgeos_log_entries
Slug
badgeos
Published
2023-11-07
Title
BadgeOS <= 3.7.1.6 - Missing Authorization
Slug
badr-naver-syndication
Published
2025-02-13
Title
Naver Syndication V2 <= 0.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
baggage-freight
Published
2018-12-24
Title
Baggage Freight Shipping Australia 0.1.0 - Unauthenticated Arbitrary File Upload
Slug
baidu-tongji-generator
Published
2023-05-18
Title
Baidu Tongji generator <= 1.0.2 - Admin+ Stored XSS
Slug
baiduseo
Published
2025-05-14
Title
百度站长SEO合集(支持百度/神马/Bing/头条推送) < 2.0.7 - Unauthenticated Arbitrary File Upload
Slug
baiduseo
Published
2025-10-19
Title
百度站长SEO合集(支持百度/神马/Bing/头条推送) < 2.1.5 - Missing Authorization
Slug
baidushare-wp
Published
2025-08-23
Title
百度分享按钮 <= 1.0.6 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bakkbone-florist-companion
Published
2024-12-02
Title
FloristPress < 7.4.0 - Missing Authorization to Sensitive Data Exposure
Slug
bakkbone-florist-companion
Published
2024-12-02
Title
FloristPress < 7.4.0 - Missing Authorization to Arbitrary Content Deletion
Slug
bakkbone-florist-companion
Published
2024-12-11
Title
FloristPress < 7.3.0 - Reflected Cross-Site Scripting
Slug
bamazoo-button-generator
Published
2024-10-24
Title
Bamazoo – Button Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dgs Shortcode
Slug
bamboo-columns
Published
2023-11-15
Title
Bamboo Columns <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bamboo-enquiries
Published
2024-11-08
Title
Bamboo Enquiries <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ban-users
Published
2023-09-12
Title
BAN Users <= 1.5.3 - Subscriber+ Settings Update & Privilege Escalation via Missing Authorization
Slug
bandsintown
Published
2025-02-19
Title
Bandsintown Events < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bang-tinh-lai-suat
Published
2025-06-05
Title
Bang tinh vay <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
banhammer
Published
2025-09-25
Title
Banhammer < 3.4.9 - Unauthenticated Protection Mechanism Bypass
Slug
bank-mellat
Published
2022-03-01
Title
Bank Mellat < 2.0.1 - Reflected Cross-Site Scripting
Slug
banner-cycler
Published
2022-08-02
Title
Banner Cycler <= 1.4 - Stored Cross-Site Scripting via CSRF
Slug
banner-effect-header
Published
2015-01-12
Title
Banner Effect Header 1.2.6 - XSS & CSRF