WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
best-woocommerce-feed
Published
2026-07-15
Title
Product Feed Manager For WooCommerce < 7.6.2 - Reflected Cross-Site Scripting via 's' Search Parameter
Slug
best-woocommerce-feed
Published
2026-07-13
Title
Product Feed Manager for WooCommerce < 7.6.1 - Contributor+ SQL Injection via Feed Filter
Slug
best-woocommerce-feed
Published
2026-07-24
Title
Product Feed Manager For WooCommerce – Sell on 200+ Online Marketplaces < 7.6.2 - Unauthenticated Stored Cross-Site Scripting
Slug
best-woocommerce-feed
Published
2026-09-17
Title
Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels < 7.12.1 - Authenticated (Contributor+) SQL Injection
Slug
best-woocommerce-feed
Published
2026-10-29
Title
Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels < 7.14.2 - Missing Authorization
Slug
best-woocommerce-feed
Published
2026-10-30
Title
Product Feed Manager for WooCommerce – RexFeed – Sell on 200+ Shopping Channels < 7.14.2 - Authenticated (Shop Manager+) PHP Object Injection
Slug
best-wp-google-map
Published
2026-01-16
Title
Best-wp-google-map <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'latitude' Shortcode Attribute
Slug
bestbooks
Published
2022-05-17
Title
Bestbooks <= 2.6.3 - Unauthenticated SQLi
Slug
bet-sport-free
Published
2024-12-12
Title
Bet sport Free <= 1.0.0 - Cross-Site Request Forgery
Slug
bet-wc-2018-russia
Published
2024-10-21
Title
Bet WC 2018 Russia <= 2.1 - Reflected Cross-Site Scripting
Slug
betpress
Published
2025-08-25
Title
BetPress <= 1.0.1 Lite - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
better-anchor-links
Published
2024-01-16
Title
Better Anchor Links <= 1.7.5 - Cross-Site Request Forgery via admin/options.php
Slug
better-author-bio
Published
2024-10-14
Title
Better Author Bio <= 2.7.10.11 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
better-bp-registration
Published
2024-10-14
Title
BuddyPress Better Registration <= 1.6 - Authentication Bypass to Administrator
Slug
better-business-reviews
Published
2026-01-09
Title
Better Business Reviews < 0.1.2 - Missing Authorization
Slug
better-business-reviews
Published
2026-01-06
Title
Better Business Reviews < 0.1.2 - Missing Authorization
Slug
better-captcha-gravity-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
better-captcha-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
better-chat-support
Published
2025-11-20
Title
Better Chat Support for Messenger < 1.2.19 - Missing Authorization
Slug
better-click-to-tweet
Published
2022-11-28
Title
Better Click to Tweet < 5.10.4 - Settings Update via CSRF
Slug
better-comments
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
better-comments
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
better-comments
Published
2024-04-03
Title
Better Comments < 1.5.6 - Admin+ Stored XSS
Slug
better-comments
Published
2024-04-03
Title
Better Comments < 1.5.6 - Subscriber+ Stored XSS
Slug
better-elementor-addons
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius