WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
before-and-after-product-images-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bei-fen
Published
2025-09-29
Title
Bei Fen – WordPress Backup Plugin <= 1.4.2 - Authenticated (Subscriber+) Local File Inclusion
Slug
belingogeo
Published
2025-05-09
Title
belingoGeo < 1.12.1 - Unauthenticated Arbitrary File Download
Slug
bellows-accordion-menu
Published
2023-10-29
Title
Bellows Accordion Menu < 1.4.3 - Contributor+ Stored Cross-Site Scripting
Slug
bellows-accordion-menu
Published
2025-06-05
Title
Bellows Accordion Menu < 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bemax-elementor
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
benaa-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
benaa-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates
Slug
benaa-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Authenticated (Subscriber+) Arbitrary File Upload
Slug
benchmark-email-lite
Published
2024-04-08
Title
Benchmark Email Lite < 4.2 - Cross-Site Request Forgery via page_settings()
Slug
bertha-ai-free
Published
2023-12-27
Title
BERTHA AI Plugin < 1.11.10.8 - Unauthenticated Arbitrary File Upload
Slug
bertha-ai-free
Published
2025-04-17
Title
BERTHA AI < 1.12.11 - Authenticated (Subscriber+) Arbitrary Content Deletion
Slug
bertha-ai-free
Published
2025-05-16
Title
BERTHA AI <= 1.12.11 - Missing Authorization
Slug
bertha-ai-free
Published
2025-11-29
Title
BERTHA AI <= 1.13 - Missing Authorization
Slug
best-addons-for-elementor
Published
2024-11-28
Title
Best Addons for Elementor <= 1.0.5 - Contributor+ Stored XSS
Slug
best-bootstrap-widgets-for-elementor
Published
2024-11-08
Title
best bootstrap widgets for elementor <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
best-css-compiler
Published
2025-01-16
Title
WOW Best CSS Compiler <= 2.0.2 - Reflected Cross-Site Scripting
Slug
best-posts-summary
Published
2025-04-25
Title
Best Posts Summary <= 1.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
best-restaurant-menu-by-pricelisto
Published
2023-11-07
Title
Best Restaurant Menu by PriceListo < 1.4.0 - Settings Update via CSRF
Slug
best-restaurant-menu-by-pricelisto
Published
2024-07-22
Title
Best Restaurant Menu by PriceListo < 1.4.2 - Authenticated (Contributor+) SQL Injection
Slug
best-restaurant-menu-by-pricelisto
Published
2024-10-21
Title
Best Restaurant Menu by PriceListo < 1.4.3 - Missing Authorization
Slug
best-restaurant-menu-by-pricelisto
Published
2025-09-05
Title
Best Restaurant Menu by PriceListo <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
best-woocommerce-feed
Published
2019-02-26
Title
Freemius Library < 2.2.4 - Subscriber+ Arbitrary Option Update
Slug
best-woocommerce-feed
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
best-woocommerce-feed
Published
2023-12-28
Title
Product Feed Manager < 7.3.16 - Authenticated (Admin+) Directory Traversal