WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bulk-woocommerce-category-creator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulk-woocommerce-category-creator
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bulk-youtube-post-creator
Published
2025-06-18
Title
Bulk YouTube Post Creator <= 1.0 - Reflected Cross-Site Scripting
Slug
bulkpress
Published
2024-11-15
Title
BulkPress <= 0.3.5 - Reflected Cross-Site Scripting
Slug
bulletin-announcements
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulletin-announcements
Published
2023-05-11
Title
Announcement & Notification Banner – Bulletin < 3.7.1 - Cross-Site Request Forgery
Slug
bulletin-announcements
Published
2023-05-11
Title
Announcement & Notification Banner – Bulletin < 3.7.0 - Subscriber+ Unauthorized Access and Modification
Slug
bulletin-announcements
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bulletin-announcements
Published
2024-03-28
Title
WordPress Announcement & Notification Banner Plugin – Bulletin < 3.9.0 - Authenticated (Administrator+) SQL Injection
Slug
bulletin-announcements
Published
2024-11-20
Title
Bulletin Announcements < 3.12 - Reflected Cross-Site Scripting
Slug
bulletin-announcements
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
bulletproof-security
Published
2014-08-01
Title
BulletProof Security <= .47 - Cross-Site Scripting (XSS)
Slug
bulletproof-security
Published
2014-08-01
Title
BulletProof Security - Security Log Script Insertion
Slug
bulletproof-security
Published
2014-09-30
Title
BulletProof Security < .52.5 - Script Insertion
Slug
bulletproof-security
Published
2014-11-05
Title
BulletProof Security <= .51 - Multiple Vulnerabilities (XSS & SSRF)
Slug
bulletproof-security
Published
2015-09-14
Title
BulletProof Security <= .52.4 - Authenticated Cross-Site Scripting (XSS)
Slug
bulletproof-security
Published
2016-03-17
Title
Bulletproof Security <= .53.2 - Multiple Cross Site Scripting Vulnerabilities
Slug
bulletproof-security
Published
2016-05-11
Title
BulletProof Security <= .53.3 - Multiple XSS Vulnerabilities
Slug
bulletproof-security
Published
2021-09-16
Title
BulletProof Security < 5.2 - Sensitive Information Disclosure
Slug
bulletproof-security
Published
2022-02-22
Title
BulletProof Security < 5.8 - Admin+ Stored Cross-Site Scripting (XSS)
Slug
bulletproof-security
Published
2022-04-19
Title
BulletProof Security < 6.1 - Admin+ Stored Cross-Site Scripting
Slug
bulletproof-security
Published
2026-01-06
Title
BulletProof Security < 7.0 - Unauthenticated Sensitive Information Exposure
Slug
bulma-shortcodes
Published
2025-11-20
Title
Bulma Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bunnycdn
Published
2024-04-08
Title
bunny.net – WordPress CDN Plugin < 2.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
bunnycdn
Published
2025-05-19
Title
bunny.net < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting