WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bdthemes-prime-slider-lite
Published
2024-05-07
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.14.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2024-05-22
Title
Prime Slider < 3.14.2 - Contributor+ Stored XSS via Pagepiling Widget
Slug
bdthemes-prime-slider-lite
Published
2024-06-06
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.14.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget
Slug
bdthemes-prime-slider-lite
Published
2024-11-06
Title
Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider < 3.15.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget
Slug
bdthemes-prime-slider-lite
Published
2025-01-22
Title
Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) < 3.16.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bdthemes-prime-slider-lite
Published
2025-12-17
Title
Prime Slider – Addons for Elementor < 4.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
bdthemes-prime-slider-lite
Published
2025-12-13
Title
Prime Slider – Addons For Elementor < 4.1.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
bdthemes-prime-slider-lite
Published
2026-04-07
Title
Prime Slider < 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter
Slug
bdvs-password-reset
Published
2025-08-28
Title
Password Reset with Code < 0.0.17 - Insecure Password Reset Code Creation
Slug
be-popia-compliant
Published
2022-03-30
Title
Be POPIA Compliant < 1.1.6 - Unauthenticated Sensitive Information Exposure
Slug
be-shortcodes
Published
2024-11-08
Title
Be Shortcodes <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beacon-by
Published
2025-05-07
Title
Beacon Lead Magnets and Lead Capture < 1.5.9 - Cross-Site Request Forgery
Slug
beacon-by
Published
2025-01-06
Title
Beacon Lead Magnets and Lead Capture < 1.5.8 - Reflected Cross-Site Scripting
Slug
beacon-for-helpscout
Published
2024-11-08
Title
Beacon For Help Scout <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
beaf-before-and-after-gallery
Published
2024-04-12
Title
BEAF < 4.5.5 - Cross-Site Request Forgery to Notice Dismissal
Slug
beaf-before-and-after-gallery
Published
2025-05-07
Title
BEAF < 4.6.11 - Authenticated (Admin+) Arbitrary File Upload
Slug
beam-me-up-scotty
Published
2024-09-24
Title
Beam me up Scotty – Back to Top Button < 1.0.22 - Reflected Cross-Site Scripting
Slug
beam-me-up-scotty
Published
2025-04-01
Title
Beam me up Scotty – Back to Top Button <= 1.0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
bears-backup
Published
2025-07-16
Title
Bears Backup < 2.1.0 - Unauthenticated Remote Code Execution
Slug
beautiful-and-responsive-cookie-consent
Published
2022-11-03
Title
Beautiful Cookie Consent Banner < 2.9.1 - Admin+ Stored XSS
Slug
beautiful-and-responsive-cookie-consent
Published
2023-02-13
Title
Beautiful Cookie Consent Banner < 2.10.2 - Unauthenticated Stored XSS
Slug
beautiful-and-responsive-cookie-consent
Published
2023-06-26
Title
Beautiful Cookie Consent Banner < 2.10.2 - Unauthenticated Stored Cross-Site Scripting
Slug
beautiful-and-responsive-cookie-consent
Published
2025-07-01
Title
Beautiful Cookie Consent Banner < 4.6.2 - Reflected Cross-Site Scripting
Slug
beautiful-link-preview
Published
2025-03-24
Title
Beautiful Link Preview <= 1.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
beautiful-taxonomy-filters
Published
2024-12-06
Title
Beautiful Taxonomy Filters < 2.4.4 - Unauthenticated SQL Injection