WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
big-boom-directory
Published
2025-04-02
Title
Big Boom Directory < 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bigbluebutton
Published
2020-04-09
Title
BigBlueButton < 2.2.4 - Reflected Cross-Site Scripting (XSS)
Slug
bigbluebutton
Published
2023-08-09
Title
BigBlueButton <= 3.0.0-beta.4 - Reflected XSS
Slug
bigbuy-wc-dropshipping-connector
Published
2025-02-17
Title
BigBuy Dropshipping Connector for WooCommerce < 2.0.1 - Unauthenticated Full Path Disclosute
Slug
bigbuy-wc-dropshipping-connector
Published
2025-11-20
Title
BigBuy Dropshipping Connector for WooCommerce <= 2.0.5 - Unauthenticated IP Spoofing to phpinfo() Exposure
Slug
bigcommerce
Published
2023-11-28
Title
BigCommerce <= 5.1.2 - Unauthenticated Sensitive Information Exposure
Slug
bigcontact
Published
2014-08-01
Title
bigcontact - SQLI
Slug
bigcontact
Published
2023-07-10
Title
BigContact <= 1.5.8 - Cross-Site Request Forgery
Slug
bigmart-elements
Published
2024-10-31
Title
Bigmart Elements <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bilingual-linker
Published
2025-01-24
Title
Bilingual Linker < 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
billingo
Published
2022-10-10
Title
Official Integration for Billingo < 3.4.0 - ShopManager+ Stored XSS
Slug
billingo
Published
2025-07-10
Title
Official Integration for Billingo <= 4.2.9 - Shop Manager+ Privilege Escalation
Slug
billplz-for-contact-form-7
Published
2025-08-13
Title
Billplz Addon for Contact Form 7 < 1.2.1 - Reflected Cross-Site Scripting
Slug
biltorvet-dealer-tools
Published
2025-01-07
Title
Biltorvet Dealer Tools <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bin-stripe-donation
Published
2024-11-28
Title
Stripe Donation <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bin-stripe-donation
Published
2024-12-13
Title
Stripe Donation <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
binary-mlm-plan
Published
2025-05-21
Title
Binary MLM Plan < 5.0 - Unauthenticated SQL Injection
Slug
binary-mlm-plan
Published
2025-10-14
Title
Binary MLM Plan < 5.0 - Unauthenticated Limited Privilege Escalation
Slug
binary-mlm-plan
Published
2025-10-16
Title
Binary MLM Plan <= 5.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
bing-site-verification-using-meta-tag
Published
2023-02-20
Title
Bing Site Verification using Meta Tag <= 1.0 - Admin+ Stored XSS
Slug
binlayerpress
Published
2025-03-11
Title
binlayerpress <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
biometric-login-for-woocommerce
Published
2023-08-08
Title
Biometric Login for WooCommerce < 1.0.4 - Unauthenticated Privilege Escalation
Slug
bird-feeder
Published
2014-12-17
Title
Bird Feeder <= 1.2.3 - CSRF & XSS
Slug
birth-chart-compatibility
Published
2025-07-21
Title
Birth Chart Compatibility <= 2.0 - Unauthenticated Full Path Exposure
Slug
birthdays-widget
Published
2022-05-09
Title
Birthdays Widget <= 1.7.18 - Admin+ Stored Cross Site Scripting