WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
b2bking
Published
2023-06-03
Title
B2BKing < 4.6.20 - Subscriber+ Arbitrary Products Price Update
Slug
b2bking
Published
2025-09-26
Title
B2BKing Premium < 5.4.20 - Unauthenticated Open Redirect
Slug
b2bking
Published
2026-08-19
Title
B2Bking < 5.6.08 - Unauthenticated Stored Cross-Site Scripting
Slug
b2bking-wholesale-for-woocommerce
Published
2026-05-25
Title
B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More < 5.2.10 - Missing Authorization
Slug
b2bking-wholesale-for-woocommerce
Published
2026-08-18
Title
B2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — Wholesale Prices, Bulk Order Form & More < 5.2.40 - Missing Authorization
Slug
b2bking-wholesale-for-woocommerce
Published
2026-09-04
Title
B2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role Selection
Slug
b2i-investor-tools
Published
2025-05-12
Title
B2i Investor Tools < 1.0.8 - Reflected Cross-Site Scripting
Slug
ba-book-everything
Published
2020-11-12
Title
BA Book Everything < 1.3.25 - Unauthenticated Reflected XSS & XFS
Slug
ba-book-everything
Published
2024-04-15
Title
BA Book Everything < 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
ba-book-everything
Published
2024-04-12
Title
BA Book Everything < 1.6.5 - Authenticated (Contributor+) SQL Injection
Slug
ba-book-everything
Published
2024-04-16
Title
BA Book Everything < 1.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
ba-book-everything
Published
2024-09-23
Title
BA Book Everything < 1.6.21 - Cross-Site Request Forgery to Email Address Update/Account Takeover
Slug
ba-book-everything
Published
2024-09-23
Title
BA Book Everything < 1.6.21 - Unauthenticated Arbitrary User Password Reset
Slug
ba-book-everything
Published
2024-09-30
Title
BA Book Everything < 1.6.21 - Reflected Cross-Site Scripting
Slug
ba-book-everything
Published
2025-12-18
Title
BA Book Everything < 1.8.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via babe-search-form Shortcode
Slug
ba-book-everything
Published
2026-01-08
Title
BA Book Everything < 1.8.17 - Missing Authorization
Slug
ba-book-everything
Published
2026-09-24
Title
BA Book Everything < 1.8.28 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter
Slug
ba-book-everything
Published
2026-10-01
Title
BA Book Everything < 1.8.29 - Unauthenticated Stored Cross-Site Scripting via 'booking_service_qty' Parameter
Slug
ba-book-everything
Published
2026-10-30
Title
BA Book Everything < 1.8.34 - Unauthenticated Stored Cross-Site Scripting
Slug
ba-plus-before-after-image-slider-free
Published
2024-01-16
Title
BA Plus <= 1.0.3 - Reflected Cross-Site Scripting
Slug
babelz
Published
2024-07-11
Title
BabelZ – Google Translate Widget <= 1.1.5 - CSRF to Stored XSS
Slug
back-button-widget
Published
2023-12-26
Title
Back Button Widget < 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
back-button-widget
Published
2025-05-19
Title
Back Button Widget < 1.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
back-in-stock-notifier-for-woocommerce
Published
2024-05-07
Title
Back In Stock Notifier for WooCommerce | WooCommerce Waitlist Pro < 5.3.2 - Unauthenticated Arbitrary Shortcode Execution
Slug
back-link-tracker
Published
2024-10-18
Title
Back Link Tracker <= 1.0.0 - Cross-Site Request Forgery to SQL Injection