WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-back-button
Published
2024-05-30
Title
WP Back Button <= 1.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
wp-background-tile
Published
2025-01-16
Title
WP Background Tile <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
wp-backgrounds-lite
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
wp-backitup
Published
2014-07-16
Title
WP Backitup <= 1.9.1 - Backup File Disclosure
Slug
wp-backitup
Published
2024-03-05
Title
Backup and Restore WordPress < 1.50 - Unauthenticated Sensitive Data Exposure
Slug
wp-backitup
Published
2024-08-12
Title
Backup and Restore WordPress <= 1.50 - Missing Authorization
Slug
wp-backitup
Published
2024-08-12
Title
Backup and Restore WordPress <= 1.50 - Missing Authorization
Slug
wp-backitup
Published
2024-08-12
Title
Backup and Restore WordPress <= 1.50 - Cross-Site Request Forgery
Slug
wp-backitup
Published
2025-01-06
Title
Backup and Restore Wordpress <= 1.50 - Cross-Site Request Forgery to Backup Trigger
Slug
wp-backitup
Published
2026-01-21
Title
BackItUp <= 2.1.0 - Missing Authorization
Slug
wp-backpack
Published
2024-05-17
Title
WP Backpack <= 2.1 - Admin+ Stored XSS
Slug
wp-backup-manager
Published
2023-06-16
Title
WP Backup Manager <= 1.13.1 - Reflected XSS
Slug
wp-backup-plus
Published
2015-05-15
Title
WP Backup Plus - Backup Disclosure
Slug
wp-baidu-map
Published
2024-10-29
Title
WP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
wp-baidu-submit
Published
2023-02-15
Title
WP BaiDu Submit <= 1.2.1 - Admin+ Stored XSS
Slug
wp-ban
Published
2014-09-17
Title
WP-Ban < 1.64 BlackList Bypass
Slug
wp-ban
Published
2022-12-06
Title
WP-Ban < 1.69.1 - Admin+ Stored XSS
Slug
wp-ban-user
Published
2024-12-12
Title
WP-Ban-User <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
wp-bannerize
Published
2014-08-01
Title
WP Bannerize <= 2.8.6 - SQL Injection
Slug
wp-bannerize
Published
2014-08-01
Title
WP Bannerize <= 2.8.7 - SQL Injection
Slug
wp-bannerize
Published
2021-10-05
Title
WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection
Slug
wp-bannerize-pro
Published
2023-09-01
Title
WP Bannerize Pro < 1.7.0 - Reflected XSS
Slug
wp-bannerize-pro
Published
2024-08-12
Title
WP Bannerize Pro < 1.9.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-bannerize-pro
Published
2025-09-03
Title
WP Bannerize Pro < 1.11.0 - Authenticated (Editor+) Server-Side Request Forgery
Slug
wp-bannerize-pro
Published
2026-01-25
Title
Bannerize Pro < 1.11.1 - Missing Authorization