WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bbp-move-topics
Published
2025-07-16
Title
bbPress Move Topics <= 1.1.6 - Reflected Cross-Site Scripting
Slug
bbp-style-pack
Published
2023-05-30
Title
bbp style pack < 5.5.6 - Reflected XSS
Slug
bbp-style-pack
Published
2023-10-16
Title
bbp style pack < 5.6.8 - Contributor+ Stored XSS
Slug
bbp-toolkit
Published
2023-05-31
Title
bbPress Toolkit <= 1.0.12 - Reflected XSS
Slug
bbp-toolkit
Published
2023-05-31
Title
bbPress Toolkit <= 1.0.12 - Cross-Site Request Forgery
Slug
bbp-topic-count
Published
2025-09-26
Title
bbp topic count <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bbp-voting
Published
2023-01-27
Title
bbPress Voting < 2.1.11.1 - Admin+ Stored XSS
Slug
bbpowerpack
Published
2024-07-24
Title
PowerPack for Beaver Builder < 2.33.1 - Contributor+ Privilege Escalation
Slug
bbpowerpack
Published
2024-08-16
Title
PowerPack for Beaver Builder < 2.37.4 - Reflected Cross-Site Scripting
Slug
bbpress
Published
2014-08-01
Title
bbPress - Multiple Script Malformed Input Path Disclosure
Slug
bbpress
Published
2014-08-01
Title
bbPress - forum.php page Parameter SQL Injection
Slug
bbpress
Published
2016-05-02
Title
bbPress <= 2.5.8 - Stored Cross-Site Scripting (XSS)
Slug
bbpress
Published
2016-07-13
Title
bbPress <= 2.5.9 - Display Name & Avatar Potential Cross-Site Scripting (XSS)
Slug
bbpress
Published
2017-11-13
Title
bbPress <= 2.5.12 - Unauthenticated SQL Injection
Slug
bbpress
Published
2020-05-28
Title
bbPress < 2.6.5 - Unauthenticated Privilege Escalation when New User Registration enabled
Slug
bbpress
Published
2020-05-28
Title
bbPress 2.6-2.6.5 - Authenticated Privilege Escalation via the Super Moderator feature
Slug
bbpress
Published
2020-05-28
Title
bbPress < 2.6.5 - Authenticated Stored Cross-Site Scripting via the forums list table
Slug
bbpress
Published
2019-11-12
Title
bbPress < 2.6.0 - Subscriber+ Stored Cross-Site Scripting via Post Slug
Slug
bbpress
Published
2025-03-04
Title
bbPress < 2.6.12 - Cross-Site Request Forgery to Limited Privilege Escalation
Slug
bbpress-login-register-links-on-forum-topic-pages
Published
2019-12-25
Title
bbPress Login Register Links On Forum Topic Pages < 2.8.5 - CSRF to Stored XSS
Slug
bbpress-notify-nospam
Published
2024-07-04
Title
bbPress Notify < 2.18.4 - Reflected Cross-Site Scripting
Slug
bbpress-notify-nospam
Published
2025-07-19
Title
bbPress Notify < 2.20 - Reflected Cross-Site Scripting
Slug
bbpress-simple-advert-units
Published
2025-06-21
Title
bbpress Simple Advert Units <= 0.41 - Reflected Cross-Site Scripting
Slug
bbpress2-shortcode-whitelist
Published
2025-04-17
Title
bbPress2 shortcode whitelist <= 2.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bbresolutions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius