WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bsk-gravityforms-blacklist
Published
2025-01-03
Title
BSK Forms Blacklist < 4.0 - SQLi via CSRF
Slug
bsk-pdf-manager
Published
2014-08-01
Title
BSK PDF Manager < 1.5 - Multiple Authenticated SQL Injections
Slug
bsk-pdf-manager
Published
2014-08-01
Title
BSK PDF Manager < 2.9.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
bsk-pdf-manager
Published
2021-11-01
Title
BSK PDF Manager < 3.1.2 - Admin+ SQL Injection
Slug
bsk-pdf-manager
Published
2023-10-23
Title
BSK PDF Manager < 3.4.2 - Contributor+ Stored XSS via Shortcode
Slug
bsk-pdf-manager
Published
2024-07-15
Title
BSK PDF Manager < 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bsk-pdf-manager
Published
2025-12-11
Title
BSK PDF Manager < 3.7.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
Slug
bstone-demo-importer
Published
2024-10-25
Title
Bstone Demo Importer <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
bsuite
Published
2014-09-27
Title
bSuite - Multiple Cross-Site Scripting (XSS)
Slug
bu-section-editing
Published
2024-12-19
Title
BU Section Editing <= 0.9.9 - Reflected XSS
Slug
bu-section-editing
Published
2024-12-17
Title
BU Section Editing <= 0.9.9 - Reflected Cross-Site Scripting
Slug
bu-slideshow
Published
2024-11-08
Title
BU Slideshow <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bubble-menu
Published
2023-01-20
Title
Bubble Menu - Circle Floating Menu < 3.0.2 - Form Deletion via CSRF
Slug
bubble-menu
Published
2023-05-22
Title
Multiple Plugins from Wow-Company - Reflected XSS
Slug
bubble-menu
Published
2023-07-17
Title
Bubble Menu < 3.0.5 - Admin+ Stored XSS
Slug
bubble-menu
Published
2025-01-24
Title
Bubble Menu – circle floating menu < 4.0.3 - Cross-Site Request Forgery
Slug
buckets
Published
2014-08-01
Title
buckets <= 0.1.9.2 - XSS in ZeroClipboard
Slug
buckets
Published
2025-09-22
Title
Buckets <= 0.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
buddy-press-force-password-change
Published
2025-04-23
Title
Buddypress Force Password Change <= 0.1 - Subscriber+ Account Takeover via Password Update
Slug
buddybadges
Published
2022-11-17
Title
Buddybadges <= 1.0.0 - Admin+ SQLi
Slug
buddyboss-media
Published
2018-01-17
Title
BuddyBoss Media <= 3.2.3 - Stored XSS
Slug
buddyboss-platform
Published
2021-09-16
Title
Buddyboss Platform < 1.7.9 - Subscriber+ SQL Injection
Slug
buddyboss-platform
Published
2024-05-14
Title
BuddyBoss Platform < 2.6.0 - Insecure Direct Object Reference on Like Comment
Slug
buddyboss-platform
Published
2024-04-22
Title
BuddyBoss platform < 2.7.60 - Private Comment Exposure via IDOR
Slug
buddyboss-platform
Published
2025-02-26
Title
BuddyBoss Platform < 2.8.00 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'link_title'