WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
barcode-scanner-lite-pos-to-manage-products-inventory-and-orders
Published
2026-10-07
Title
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) < 1.13.6 - Missing Authorization
Slug
barcode-scanner-lite-pos-to-manage-products-inventory-and-orders
Published
2026-10-07
Title
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) < 1.13.6 - Unauthenticated Stored Cross-Site Scripting
Slug
barcode-scanner-lite-pos-to-manage-products-inventory-and-orders
Published
2026-10-07
Title
Barcode Scanner (+Mobile App) – Inventory manager, Order fulfillment system, POS (Point of Sale) < 1.13.6 - Authenticated (Subscriber+) SQL Injection
Slug
bard-extra
Published
2024-11-20
Title
Bard Extra < 1.2.8 - Missing Authorization to Authenticated (Subscriber+) Demo Import
Slug
base64-encoderdecoder
Published
2024-04-24
Title
Base64 Encoder/Decoder <= 0.9.2 - Reflected XSS
Slug
base64-encoderdecoder
Published
2024-04-24
Title
Base64 Encoder/Decoder <= 0.9.2 - Stored XSS via CSRF
Slug
base64-encoderdecoder
Published
2024-04-24
Title
Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF
Slug
basepress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
basepress
Published
2024-04-25
Title
Knowledge Base documentation & wiki plugin – BasePress < 2.16.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
basepress
Published
2024-04-25
Title
Knowledge Base documentation & wiki plugin – BasePress < 2.16.2.1 - Missing Authorization
Slug
basepress
Published
2024-12-03
Title
Knowledge Base documentation & wiki plugin – BasePress Docs < 2.16.3.4 - Missing Authorization to Authenticated (Subscriber+) Database Update
Slug
basepress
Published
2025-12-31
Title
Knowledge Base documentation & wiki plugin – BasePress < 2.17.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
basepress
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
basepress-migration-tools
Published
2024-11-13
Title
BasePress Migration Tools <= 1.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
basic-contact-form
Published
2017-09-23
Title
Basic Contact Form <= 1.0.3 - Potential Unauthenticated Shell Upload
Slug
basic-google-maps-placemarks
Published
2014-08-01
Title
Basic Google Maps Placemarks 1.10.2 - settings.php Multiple Fields Stored XSS Weakness
Slug
basic-google-maps-placemarks
Published
2026-04-15
Title
Basic Google Maps Placemarks < 1.10.8 - Missing Authorization to Unauthenticated Default Map Coordinate Update
Slug
basic-interactive-world-map
Published
2023-11-08
Title
Basic Interactive World Map < 2.7 - Admin+ Stored XSS
Slug
basic-interactive-world-map
Published
2025-04-16
Title
Basic Interactive World Map <= 2.7 - Cross-Site Request Forgery to Settings Update
Slug
baslider
Published
2022-05-26
Title
Image Slider by NextCode <= 1.1.2 - Multiple CSRF
Slug
baslider
Published
2022-05-26
Title
Image Slider by NextCode <= 1.1.2 - Author+ Stored Cross-Site Scripting
Slug
baslider
Published
2022-05-26
Title
Image Slider by NextCode <= 1.1.2 - Arbitrary Slide Deletion via CSRF
Slug
basticom-framework
Published
2024-11-04
Title
Basticom Framework < 1.5.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
basticom-framework
Published
2025-12-21
Title
Basticom Framework < 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
batch-cat
Published
2021-10-05
Title
Batch Cat <= 0.3 - Subscriber+ Arbitrary Categories Add/Set/Delete to Posts