WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-base-booking-of-appointments-services-and-events
Published
2025-02-05
Title
WP BASE Booking of Appointments, Services and Events < 5.0.0 - Reflected XSS
Slug
wp-basic-elements
Published
2023-03-14
Title
WP Basic Elements < 5.3.0 - Settings Update via CSRF
Slug
wp-basics
Published
2024-11-04
Title
WP-Basics <= 2.0 - Reflected Cross-Site Scripting
Slug
wp-bbcode
Published
2025-11-10
Title
WP BBCode <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-best-quiz
Published
2022-10-28
Title
WP Best Quiz <= 1.0 - Author+ Stored XSS
Slug
wp-better-emails
Published
2023-01-13
Title
WP Better Emails <= 0.4 - Admin+ Stored XSS
Slug
wp-better-permalinks
Published
2019-06-27
Title
WP Better Permalinks <= 3.0.4 - CSRF allowing Option Update
Slug
wp-bibtex
Published
2025-01-20
Title
WP-BibTeX < 3.0.2 - Cross-Site Request Forgery to Stored and Reflected Cross-Site Scripting
Slug
wp-bibtex
Published
2025-02-17
Title
WP-BibTeX <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-bing-search
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
wp-bing-search
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
wp-biographia
Published
2025-06-05
Title
WP Biographia <= 4.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
wp-bitly
Published
2023-11-06
Title
Bitly's < 2.7.2 - Contributor+ Stored XSS
Slug
wp-bitly
Published
2024-08-09
Title
Bitly's WordPress Plugin < 2.7.3 - Missing Authorization
Slug
wp-bitly
Published
2025-01-08
Title
Bitly's WordPress Plugin < 2.7.4 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
wp-bitly
Published
2025-09-22
Title
Bitly <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-blackcheck
Published
2025-01-16
Title
WP-BlackCheck <= 2.7.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-blipbot
Published
2014-06-12
Title
WP Blipbot <= 3.0.9 - XSS
Slug
wp-bliss-gallery
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
wp-block-pack
Published
2025-01-16
Title
Block Collection for You – WP Block Pack <= 1.1.6 - Reflected Cross-Site Scripting
Slug
wp-blocks-hub
Published
2024-10-03
Title
WP Blocks Hub <= 1.0.2 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
wp-blog-and-widgets
Published
2023-01-12
Title
WP Blog and Widget < 2.3.1 - Contributor+ Stored XSS via Shortcode
Slug
wp-blog-manager-lite
Published
2021-10-13
Title
Backdoored Plugins & Themes from AccessPress Themes
Slug
wp-blog-post-layouts
Published
2024-06-20
Title
WP Blog Post Layouts < 1.1.4 - Authenticated (Contributor+) Local File Inlcusion
Slug
wp-blogs-planetarium
Published
2023-11-13
Title
WP Blogs' Planetarium <= 1.0 - Settings Update via CSRF