WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bbresolutions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bbs-e-franchise
Published
2016-11-12
Title
BBS e-Franchise 1.1.1 - Unauthenticated SQL Injection
Slug
bbs-e-popup
Published
2023-05-30
Title
BBS e-Popup <= 2.4.5 - Reflected XSS
Slug
bbspoiler
Published
2023-04-18
Title
BBSpoiler < 2.02 - Contributor+ Stored XSS
Slug
bc-menu-cart-woo
Published
2023-12-07
Title
BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter <= 1.49.3 - Cross-Site Request Forgery
Slug
bc-woo-custom-thank-you-pages
Published
2024-04-15
Title
Custom Thank You Page Customize For WooCommerce by Binary Carpenter < 1.4.14 - Missing Authorization
Slug
bck-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang
Published
2024-09-23
Title
Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting
Slug
bcm-duplicate-menu
Published
2025-09-05
Title
BCM Duplicate Menu <= 1.1.2 - Cross-Site Request Forgery
Slug
bcorp-shortcodes
Published
2023-12-05
Title
BCorp Shortcodes <= 0.23 - Unauthenticated PHP Object Injection
Slug
bcs-bertline-book-importer
Published
2021-06-14
Title
BCS BatchLine Book Importer < 1.5.8 - Unauthenticated Product Import
Slug
bd-courier-order-ratio-checker
Published
2026-01-06
Title
BD Courier Order Ratio Checker <= 2.0.1 - Missing Authorization
Slug
bdthemes-element-pack
Published
2024-04-25
Title
Element Pack Pro < 7.19.3 - Contributor+ Arbitrary File Read and PHAR Deserialization
Slug
bdthemes-element-pack
Published
2024-07-31
Title
Element Pack - Addon for Elementor Page Builder WordPress Plugin < 7.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL
Slug
bdthemes-element-pack
Published
2025-05-16
Title
Element Pack Pro < 8.0.0 - Cross-Site Request Forgery
Slug
bdthemes-element-pack
Published
2025-05-16
Title
Element Pack Pro < 8.0.0 - Missing Authorization
Slug
bdthemes-element-pack-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bdthemes-element-pack-lite
Published
2024-02-02
Title
Element Pack Elementor Addons < 5.4.12 - Missing Authorization via bdt_duplicate_as_draft
Slug
bdthemes-element-pack-lite
Published
2024-03-25
Title
Element Pack Elementor Addons < 5.5.4 - Contributor+ Stored XSS
Slug
bdthemes-element-pack-lite
Published
2024-03-28
Title
Element Pack Elementor Addons < 5.5.4 - Authenticated (Contributor+) SQL Injection
Slug
bdthemes-element-pack-lite
Published
2024-04-05
Title
Element Pack Elementor Addons < 5.5.4 - Contributor+ Stored XSS via Trailer Box Widget
Slug
bdthemes-element-pack-lite
Published
2024-04-05
Title
Element Pack Elementor Addons < 5.3.3 - Contributor+ Stored XSS via Custom Gallery Widget
Slug
bdthemes-element-pack-lite
Published
2024-04-10
Title
Element Pack Elementor Addons < 5.6.0 - Sensitive Information Exposure via element_pack_ajax_search
Slug
bdthemes-element-pack-lite
Published
2024-04-17
Title
Element Pack Elementor Addons < 5.6.1 - Contributor+ Stored XSS via Price List Widget
Slug
bdthemes-element-pack-lite
Published
2024-04-17
Title
Element Pack Elementor Addons < 5.6.1 - Contributor+ Stored XSS via Panel Slider Widget
Slug
bdthemes-element-pack-lite
Published
2024-05-21
Title
Element Pack Elementor Addons < 5.6.2 - Contributor+ Stored XSS