WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
better-wp-security
Published
2015-04-14
Title
iThemes Security 3.0-4.6.12 – Stored Cross-Site Scripting (XSS)
Slug
better-wp-security
Published
2016-04-05
Title
iThemes Security <= 5.3.4 - Potential Authenticated DOM Cross-Site Scripting (XSS)
Slug
better-wp-security
Published
2016-04-21
Title
iThemes Security <= 5.3.0 - Insecure Backup/Logfile Generation
Slug
better-wp-security
Published
2016-04-25
Title
iThemes Security <= 5.3.5 - Lack of Capability Check
Slug
better-wp-security
Published
2016-10-06
Title
iThemes Security <= 5.6.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
better-wp-security
Published
2018-03-05
Title
iThemes Security <= 6.9.0 - Cross-Site Scripting (XSS)
Slug
better-wp-security
Published
2018-06-22
Title
iThemes Security <= 7.0.2 - Authenticated SQL Injection
Slug
better-wp-security
Published
2021-04-21
Title
iThemes Security Free (< 7.9.1) & Pro (< 6.8.4) - Hide Backend Bypass
Slug
better-wp-security
Published
2023-10-31
Title
Solid Security Basic < 9.0.1 - Unauthenticated Login Page Disclosure
Slug
better-wp-security
Published
2024-06-20
Title
Solid Security < 9.3.2 - IP Address Spoofing to Denial of Service
Slug
betterdocs
Published
2021-09-20
Title
BetterDocs 1.9.0-1.9.1 - Reflected Cross-Site Scripting
Slug
betterdocs
Published
2021-09-20
Title
BetterDocs < 1.9.0 - Reflected Cross-Site Scripting
Slug
betterdocs
Published
2023-11-13
Title
BetterDocs < 2.5.3 - Missing Authorization via AJAX actions
Slug
betterdocs
Published
2024-03-25
Title
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer For Elementor & Gutenberg < 3.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
betterdocs
Published
2024-03-26
Title
BetterDocs – Best Documentation, FAQ & Knowledge Base Plugin with AI Support & Instant Answer for Elementor & Gutenberg < 3.3.4 - Unauthenticated PHP Object Injection
Slug
betterdocs
Published
2024-08-09
Title
BetterDocs < 3.5.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
betterdocs
Published
2024-08-07
Title
BetterDocs < 3.5.9 - Authenticated (Contributor+) Local File Inclusion
Slug
betterdocs
Published
2025-08-15
Title
BetterDocs < 4.1.2 - Missing Authorization to Private And Password-Protected Posts Information Disclosure
Slug
betterdocs
Published
2026-01-08
Title
BetterDocs < 4.3.4 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
betterlinks
Published
2021-10-20
Title
BetterLinks < 1.2.6 - Admin+ Stored Cross-Site Scripting
Slug
betterlinks
Published
2023-10-18
Title
BetterLinks < 1.6.1 - Improper Authorization to Data Import and Export
Slug
betterlinks
Published
2024-11-01
Title
BetterLinks < 2.1.8 - Authenticated (Administrator+) SQL Injection
Slug
betteroptin
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
beyondcart
Published
2025-09-10
Title
BeyondCart Connector < 3.0.2 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user Filter
Slug
beyot-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload