WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bruteguard
Published
2025-04-17
Title
BruteGuard – Brute Force Login Protection <= 0.1.4 - Reflected Cross-Site Scripting
Slug
brzon
Published
2025-11-03
Title
Associados Amazon Plugin <= 0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bs-shortcode-ultimate
Published
2023-11-20
Title
Bootstrap Shortcodes Ultimate <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bsd-woo-stripe-connect-split-pay
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bsd-woo-stripe-connect-split-pay
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bsecure
Published
2025-07-03
Title
bSecure – Your Universal Checkout < 1.8.0 - Unauthenticated SQL Injection
Slug
bsecure
Published
2025-07-21
Title
bSecure 1.3.7 - 1.7.9 - Missing Authorization to Unauthenticated Privilege Escalation via order_info REST Endpoint
Slug
bsi-hotel-pro
Published
2020-04-04
Title
Online Hotel Booking System Pro <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
bsk-contact-form-7-blacklist
Published
2023-11-13
Title
BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site Scripting
Slug
bsk-gravityforms-blacklist
Published
2023-11-28
Title
BSK Forms Blacklist < 3.7 - Admin+ Stored Cross-Site Scripting
Slug
bsk-gravityforms-blacklist
Published
2024-08-09
Title
BSK Forms Blacklist < 3.8.1 - Reflected Cross-Site Scripting
Slug
bsk-gravityforms-blacklist
Published
2024-09-30
Title
BSK Forms Blacklist < 3.9 - Reflected Cross-Site Scripting
Slug
bsk-gravityforms-blacklist
Published
2025-01-03
Title
BSK Forms Blacklist < 4.0 - SQLi via CSRF
Slug
bsk-pdf-manager
Published
2014-08-01
Title
BSK PDF Manager < 1.5 - Multiple Authenticated SQL Injections
Slug
bsk-pdf-manager
Published
2014-08-01
Title
BSK PDF Manager < 2.9.1 - Authenticated Stored Cross-Site Scripting (XSS)
Slug
bsk-pdf-manager
Published
2021-11-01
Title
BSK PDF Manager < 3.1.2 - Admin+ SQL Injection
Slug
bsk-pdf-manager
Published
2023-10-23
Title
BSK PDF Manager < 3.4.2 - Contributor+ Stored XSS via Shortcode
Slug
bsk-pdf-manager
Published
2024-07-15
Title
BSK PDF Manager < 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bsk-pdf-manager
Published
2025-12-11
Title
BSK PDF Manager < 3.7.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload
Slug
bsk-pdf-manager
Published
2026-02-22
Title
BSK PDF Manager <= 3.7.2 - Unauthenticated Information Exposure
Slug
bstone-demo-importer
Published
2024-10-25
Title
Bstone Demo Importer <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
bsuite
Published
2014-09-27
Title
bSuite - Multiple Cross-Site Scripting (XSS)
Slug
bu-section-editing
Published
2024-12-19
Title
BU Section Editing <= 0.9.9 - Reflected XSS
Slug
bu-section-editing
Published
2024-12-17
Title
BU Section Editing <= 0.9.9 - Reflected Cross-Site Scripting
Slug
bu-slideshow
Published
2024-11-08
Title
BU Slideshow <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting