WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
burst-statistics
Published
2026-10-02
Title
Burst Statistics < 3.7.2 - Improper Authentication to Account Persistence via Share-Link Authentication Bypass via 'burst_share_token'
Slug
bus-booking-manager
Published
2024-09-23
Title
Multipurpose Ticket Booking Manager < 4.2.3 - Administrator+ Stored XSS
Slug
bus-ticket-booking-with-seat-reservation
Published
2023-08-01
Title
Bus Ticket Booking with Seat Reservation < 5.2.4 - Reflected XSS
Slug
bus-ticket-booking-with-seat-reservation
Published
2023-11-13
Title
Bus Ticket Booking with Seat Reservation < 5.2.6 - Unauthenticated Cross-Site Scripting
Slug
bus-ticket-booking-with-seat-reservation
Published
2024-08-28
Title
Bus Ticket Booking with Seat Reservation < 5.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
bus-ticket-booking-with-seat-reservation
Published
2025-01-06
Title
Bus Ticket Booking with Seat Reservation < 5.4.4 - Cross-Site Request Forgery
Slug
bus-ticket-booking-with-seat-reservation
Published
2026-03-05
Title
Bus Ticket Booking with Seat Reservation < 5.9.0 - Unauthenticated PHP Object Injection
Slug
bus-ticket-booking-with-seat-reservation
Published
2026-03-22
Title
Bus Ticket Booking with Seat Reservation < 5.6.5 - Unauthenticated Information Exposure
Slug
bus-ticket-booking-with-seat-reservation
Published
2026-05-07
Title
Bus Ticket Booking with Seat Reservation < 5.6.8 - Missing Authorization
Slug
bus-ticket-booking-with-seat-reservation
Published
2026-10-01
Title
Bus Ticket Booking with Seat Reservation < 5.9.4 - Unauthenticated Insecure Direct Object Reference
Slug
bus-ticket-booking-with-seat-reservation
Published
2026-10-12
Title
Bus Ticket Booking with Seat Reservation < 5.9.8 - Missing Authorization
Slug
bus-ticket-booking-with-seat-reservation
Published
2026-10-20
Title
Bus Ticket Booking with Seat Reservation < 5.9.8 - Missing Authorization
Slug
business
Published
2024-10-31
Title
Business <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
business-card-block
Published
2025-02-23
Title
Business Card Block < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Arbitrary Card Deletion via CSRF
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Card Edit via CSRF
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Category Deletion via CSRF
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Category Edit via CSRF
Slug
business-card-by-esterox-100
Published
2024-07-09
Title
Business Card <= 1.0.0 - Admin+ File Upload
Slug
business-contact-widget
Published
2025-04-24
Title
Business Contact Widget <= 2.7.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
business-directory-plugin
Published
2021-04-11
Title
Business Directory Plugin < 5.11.1 - Arbitrary Add/Edit/Delete Form Field to Stored XSS
Slug
business-directory-plugin
Published
2021-04-11
Title
Business Directory Plugin < 5.11 - Arbitrary File Upload to RCE
Slug
business-directory-plugin
Published
2021-04-12
Title
Business Directory Plugin < 5.11.2 - Authenticated Stored Cross-Site Scripting
Slug
business-directory-plugin
Published
2021-04-11
Title
Business Directory Plugin < 5.11.1 - Authenticated PHP4 Upload to RCE
Slug
business-directory-plugin
Published
2021-04-12
Title
Business Directory Plugin < 5.11.2 - Arbitrary Listing Export