WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bws-featured-posts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-google-analytics
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-google-maps
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-latest-posts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-linkedin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-pinterest
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-popular-posts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-smtp
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-smtp
Published
2025-03-07
Title
SMTP by BestWebSoft < 1.2.0 - Authenticated (Administrator+) Arbitrary File Upload
Slug
bws-testimonials
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bxslider-integration
Published
2025-08-21
Title
bxSlider integration for WordPress <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bxslider-wp
Published
2022-07-27
Title
BxSlider WP <= 2.0.0 - Contributor+ Stored Cross-Site Scripting
Slug
bybrick-accordion
Published
2025-03-31
Title
byBrick Accordion <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
byconsole-woo-order-delivery-time
Published
2023-10-17
Title
WooODT Lite < 2.4.8 - Reflected XSS
Slug
byconsole-woo-order-delivery-time
Published
2023-10-31
Title
WooODT Lite < 2.4.7 - Missing Authorization to Arbitrary Options Update
Slug
byconsole-woo-order-delivery-time
Published
2025-02-17
Title
WooODT Lite – Delivery & pickup date time location for WooCommerce < 2.5.2 - Unauthenticated Full Path Dsiclosure
Slug
byconsole-woo-order-delivery-time
Published
2026-02-11
Title
WooODT Lite <= 2.5.2 - Unauthenticated Payment Bypass
Slug
byrev-wp-picshield-hotlink-defence
Published
2017-01-04
Title
ByREV WP-PICShield - Cross-Site Request Forgery (CSRF)
Slug
bzscore-live-score
Published
2023-11-07
Title
BZScore – Live Score < 1.6.0 - Contributor+ Stored XSS