WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
better-comments
Published
2024-04-03
Title
Better Comments < 1.5.6 - Admin+ Stored XSS
Slug
better-comments
Published
2024-04-03
Title
Better Comments < 1.5.6 - Subscriber+ Stored XSS
Slug
better-elementor-addons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
better-elementor-addons
Published
2023-09-01
Title
Better Elementor Addons < 1.3.9 - Subscriber+ Settings Update / Reset
Slug
better-elementor-addons
Published
2024-03-28
Title
Better Elementor Addons < 1.4.2 - Contributor+ Stored XSS
Slug
better-elementor-addons
Published
2024-03-28
Title
Better Elementor Addons < 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
better-elementor-addons
Published
2024-04-25
Title
Better Elementor Addons < 1.4.2 - Authenticated(Contributor+) Local File Inclusion
Slug
better-elementor-addons
Published
2024-05-07
Title
Better Elementor Addons < 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
better-elementor-addons
Published
2025-12-11
Title
Better Elementor Addons < 1.5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Widget
Slug
better-follow-button-for-jetpack
Published
2024-01-23
Title
Better Follow Button for Jetpack <= 8.0 - Admin+ Stored XSS
Slug
better-font-awesome
Published
2022-08-25
Title
Better Font Awesome < 2.0.2 - Settings Update via CSRF
Slug
better-font-awesome
Published
2023-01-18
Title
Better Font Awesome < 2.0.4 - Contributor+ Stored XSS
Slug
better-messages-wc-vendors-integration
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
better-messages-wcfm-integration
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
better-post-filter-widgets-for-elementor
Published
2025-08-21
Title
Better Post & Filter Widgets for Elementor < 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
better-protected-pages
Published
2025-01-16
Title
Better Protected Pages <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
better-random-redirect
Published
2025-06-19
Title
Better Random Redirect <= 1.3.20 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
better-robots-txt
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
better-robots-txt
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
better-robots-txt
Published
2023-02-14
Title
Robots.txt optimization < 1.4.6 - Cross-Site Request Forgery
Slug
better-rss-widget
Published
2023-11-15
Title
Better RSS Widget <= 2.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
better-search
Published
2014-08-01
Title
Better Search < 1.3 - admin.inc.php Setting Manipulation CSRF
Slug
better-search
Published
2014-12-16
Title
Better Search < 1.3.5 - Reflected Cross-Site Scripting (XSS)
Slug
better-search
Published
2019-03-15
Title
Better Search 2.2.2 - Unauthenticated SQL Injection
Slug
better-search
Published
2021-02-17
Title
Better Search < 2.5.3 - CSRF Nonce Bypass in Import/Export