WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
better-rss-widget
Published
2023-11-15
Title
Better RSS Widget <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
better-search
Published
2014-08-01
Title
Better Search < 1.3 - admin.inc.php Setting Manipulation CSRF
Slug
better-search
Published
2014-12-16
Title
Better Search < 1.3.5 - Reflected Cross-Site Scripting (XSS)
Slug
better-search
Published
2019-03-15
Title
Better Search 2.2.2 - Unauthenticated SQL Injection
Slug
better-search
Published
2021-02-17
Title
Better Search < 2.5.3 - CSRF Nonce Bypass in Import/Export
Slug
better-search
Published
2021-03-01
Title
Better Search < 2.5.3 - Cross-Site Request Forgery
Slug
better-search
Published
2024-03-18
Title
Better Search < 3.3.1 - Unauthenticated Stored Cross-Site Scripting
Slug
better-search
Published
2025-05-07
Title
Better Search < 4.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
better-search
Published
2025-11-22
Title
Better Search < 4.2.2 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
better-search-replace
Published
2022-08-01
Title
Better Search and Replace < 1.4.1 - Admin+ SQLi
Slug
better-search-replace
Published
2024-01-24
Title
Better Search Replace < 1.4.5 - Unauthenticated PHP Object Injection
Slug
better-search-tmc
Published
2022-03-01
Title
Folders Disclosure via Outdated jQueryFileTree Library
Slug
better-section-navigation
Published
2025-03-28
Title
Better Section Navigation Widget < 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
better-sharing
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
better-sharing
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
better-user-shortcodes
Published
2025-01-07
Title
Better User Shortcodes <= 1.0 - Reflected Cross-Site Scripting
Slug
better-wlm-api
Published
2025-01-14
Title
Better WishList API < 1.1.4 - Unauthenticated Stored Cross-Site Scripting
Slug
better-wlm-api
Published
2025-03-27
Title
Better WishList API < 1.1.5 - Reflected Cross-Site Scripting
Slug
better-wp-login-page
Published
2024-12-14
Title
Better WP Login Page <= 1.1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
better-wp-security
Published
2014-08-01
Title
Better WP Security 3.6.3 - Online Backup Storage current_time Function Brute Force Disclosure
Slug
better-wp-security
Published
2014-08-01
Title
Better WP Security 3.6.3 - /wp-admin/admin-ajax.php license Parameter Stored XSS Weakness
Slug
better-wp-security
Published
2014-08-01
Title
Better WP Security 3.5.5 - inc/admin/content.php id_specialfile Parameter Stored XSS
Slug
better-wp-security
Published
2014-08-01
Title
Better WP Security <= 3.5.3 - inc/secure.php logevent Function URL H&ling Stored XSS
Slug
better-wp-security
Published
2014-08-01
Title
Better WP Security 3.4.3 - Multiple XSS
Slug
better-wp-security
Published
2012-05-11
Title
Better WP Security <= 3.2.4 - Cross-Site Scripting (XSS)