WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bdthemes-element-pack-lite
Published
2026-01-16
Title
Element Pack Elementor Addons < 8.3.14 - Cross-Site Request Forgery
Slug
bdthemes-element-pack-lite
Published
2026-02-14
Title
Element Pack Addons for Elementor < 8.3.18 - Authenticated (Contributor+) Arbitrary File Read
Slug
bdthemes-prime-slider-lite
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bdthemes-prime-slider-lite
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2024-02-05
Title
Prime Slider – Addons For Elementor < 3.11.11 - Incorrect Authorization via bdt_duplicate_as_draft
Slug
bdthemes-prime-slider-lite
Published
2024-03-06
Title
Prime Slider – Addons For Elementor < 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fiestar Widget
Slug
bdthemes-prime-slider-lite
Published
2024-03-12
Title
Prime Slider – Addons For Elementor < 3.13.3 - Contributor+ Stored Cross-Site Scripting via Rubix Widget
Slug
bdthemes-prime-slider-lite
Published
2024-03-12
Title
Prime Slider – Addons For Elementor < 3.13.3 - Contributor+ Stored Cross-Site Scripting via Mercury Widget
Slug
bdthemes-prime-slider-lite
Published
2024-04-19
Title
Prime Slider – Addons For Elementor < 3.14.1 - Contributor+ Stored Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2024-05-07
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2024-05-22
Title
Prime Slider < 3.14.2 - Contributor+ Stored XSS via Pagepiling Widget
Slug
bdthemes-prime-slider-lite
Published
2024-06-06
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget
Slug
bdthemes-prime-slider-lite
Published
2024-11-06
Title
Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider < 3.15.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget
Slug
bdthemes-prime-slider-lite
Published
2025-01-22
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.16.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2025-12-17
Title
Prime Slider – Addons for Elementor < 4.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
bdthemes-prime-slider-lite
Published
2025-12-13
Title
Prime Slider – Addons For Elementor < 4.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
bdvs-password-reset
Published
2025-08-28
Title
Password Reset with Code < 0.0.17 - Insecure Password Reset Code Creation
Slug
be-popia-compliant
Published
2022-03-30
Title
Be POPIA Compliant < 1.1.6 - Unauthenticated Sensitive Information Exposure
Slug
be-shortcodes
Published
2024-11-08
Title
Be Shortcodes <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beacon-by
Published
2025-05-07
Title
Beacon Lead Magnets and Lead Capture < 1.5.9 - Cross-Site Request Forgery
Slug
beacon-by
Published
2025-01-06
Title
Beacon Lead Magnets and Lead Capture < 1.5.8 - Reflected Cross-Site Scripting
Slug
beacon-for-helpscout
Published
2024-11-08
Title
Beacon For Help Scout <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beaf-before-and-after-gallery
Published
2024-04-12
Title
BEAF < 4.5.5 - Cross-Site Request Forgery to Notice Dismissal
Slug
beaf-before-and-after-gallery
Published
2025-05-07
Title
BEAF < 4.6.11 - Authenticated (Admin+) Arbitrary File Upload
Slug
beam-me-up-scotty
Published
2024-09-24
Title
Beam me up Scotty – Back to Top Button < 1.0.22 - Reflected Cross-Site Scripting