WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
beyot-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
beyot-framework
Published
2025-05-01
Title
Smart Framework <= Multiple Plugins - Missing Authorization to Authenticated (Subscriber+) Settings Updates
Slug
bfg-tools-extension-zipper
Published
2026-02-13
Title
BFG Tools – Extension Zipper < 1.0.8 - Authenticated (Administrator+) Path Traversal via 'first_file' Parameter
Slug
bft-autoresponder
Published
2018-12-04
Title
Arigato Autoresponder and Newsletter < 2.5.2 - Authenticated Blind SQL Injection & Multiple XSS
Slug
bft-autoresponder
Published
2023-01-31
Title
Arigato Autoresponder and Newsletter < 2.1.7.2 - Admin+ Stored XSS
Slug
bft-autoresponder
Published
2023-02-02
Title
Arigato Autoresponder and Newsletter < 2.1.7.2 - Contributor+ Stored XSS
Slug
bft-autoresponder
Published
2023-02-06
Title
Arigato Autoresponder and Newsletter < 2.7.1.1 - Unauthenticated Stored XSS
Slug
bft-autoresponder
Published
2023-02-06
Title
Arigato Autoresponder and Newsletter < 2.7.1.1 - Admin+ Stored XSS
Slug
bft-autoresponder
Published
2023-11-16
Title
Arigato Autoresponder and Newsletter < 2.7.2.3 - CSRF
Slug
bft-autoresponder
Published
2024-05-09
Title
Arigato Autoresponder and Newsletter < 2.7.2.4 - Cross-Site Request Forgery
Slug
bft-autoresponder
Published
2025-04-17
Title
Arigato Autoresponder and Newsletter < 2.7.2.5 - Reflected Cross-Site Scripting
Slug
bg-biblie-references
Published
2022-12-17
Title
Bg Bible References <= 3.8.14 - Reflected XSS
Slug
bg-book-publisher
Published
2025-10-21
Title
Bg Book Publisher <= 1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bg-church-memos
Published
2025-09-22
Title
Bg Church Memos <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bg-hide-email-address
Published
2025-12-11
Title
Hide Email Address <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
bg-orthodox-calendar
Published
2025-06-05
Title
Bg Orthodox Calendar <= 0.13.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bg-patriarchia-bu
Published
2024-11-08
Title
Bg Patriarchia BU <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
biagiotti-core
Published
2025-09-05
Title
Biagiotti Core < 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
biagiotti-membership
Published
2024-12-17
Title
Biagiotti Membership < 1.1 - Authentication Bypass via biagiotti_membership_check_facebook_user
Slug
bib2html
Published
2014-08-01
Title
bib2html 0.9.3 - /OSBiB/create/index.php styleShortName Parameter XSS
Slug
bible-embed
Published
2025-01-16
Title
Bible Embed <= 0.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bible-text
Published
2024-06-20
Title
Bible Text <= 0.2 - Contributor+ Stored XSS
Slug
biblesupersearch
Published
2025-08-20
Title
Bible SuperSearch < 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via selector_height Parameter
Slug
bidorbuystoreintegrator
Published
2025-08-25
Title
bidorbuy Store Integrator <= 2.12.0 - Authenticated (Admin+) Remote Code Execution
Slug
bidorbuystoreintegrator
Published
2026-01-16
Title
bidorbuy Store Integrator <= 2.12.0 - Reflected Cross-Site Scripting