WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
buymeacoffee
Published
2023-06-19
Title
Buy Me a Coffee < 3.7 - Admin+ Stored XSS
Slug
buymeacoffee
Published
2023-07-10
Title
Buy Me a Coffee – Button and Widget Plugin < 3.8 - Cross-Site Request Forgery
Slug
buymeacoffee
Published
2023-07-10
Title
Buy Me a Coffee – Button and Widget Plugin < 3.8 - Subscriber+ Unauthorized Data Modification
Slug
buymeacoffee
Published
2023-07-13
Title
Buy Me a Coffee < 3.7 - Subscriber+ Stored Cross-Site Scripting
Slug
buzz-comments
Published
2026-04-21
Title
Buzz Comments <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Buzz Avatar' Setting
Slug
buzzsprout-podcasting
Published
2023-10-29
Title
Buzzsprout Podcasting < 1.8.5 - Contributor+ Stored Cross-Site Scripting
Slug
bvd-easy-gallery-manager
Published
2025-01-03
Title
BVD Easy Gallery Manager <= 1.0.6 - Reflected Cross-Site Scripting
Slug
bverse-convert
Published
2024-10-14
Title
bVerse Convert <= 1.3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bwd-elementor-addons
Published
2025-01-06
Title
BWD Elementor Addons < 4.3.19 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Slug
bwd-elementor-addons
Published
2025-04-04
Title
BWD Elementor Addons <= 4.4.3 - Contributor+ Stored XSS
Slug
bwl-advanced-faq-manager
Published
2024-04-12
Title
BWL Advanced FAQ Manager < 2.0.4 - Authenticated (Administrator+) SQL Injection
Slug
bwl-advanced-faq-manager
Published
2025-03-25
Title
BWL Advanced FAQ Manager < 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Slug
bwl-advanced-faq-manager-lite
Published
2026-03-25
Title
BWL Advanced FAQ Manager Lite < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sbox_id' Shortcode Attribute
Slug
bwl-kb-manager
Published
2025-12-22
Title
BWL Knowledge Base Manager <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bwl-pro-voting-manager
Published
2025-12-22
Title
BWL Pro Voting Manager <= 1.4.9 - Authenticated (Contributor+) SQL Injection
Slug
bwl-pro-voting-manager
Published
2025-12-22
Title
BWL Pro Voting Manager <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bwp-google-xml-sitemaps
Published
2022-02-16
Title
Better WordPress Google XML Sitemaps <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting
Slug
bwp-recaptcha
Published
2018-11-07
Title
Better WordPress reCAPTCHA <= 2.0.3 - Unauthenticated Cross-Site Scripting (XSS)
Slug
bws-featured-posts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-google-analytics
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-google-maps
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-latest-posts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-linkedin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-pinterest
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-popular-posts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)