WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bg-hide-email-address
Published
2025-12-11
Title
Hide Email Address <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
bg-orthodox-calendar
Published
2025-06-05
Title
Bg Orthodox Calendar <= 0.13.10 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bg-patriarchia-bu
Published
2024-11-08
Title
Bg Patriarchia BU <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
biagiotti-core
Published
2025-09-05
Title
Biagiotti Core < 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
biagiotti-core
Published
2026-08-11
Title
Biagiotti Core <= 2.1.1 - Unauthenticated Local File Inclusion
Slug
biagiotti-membership
Published
2024-12-17
Title
Biagiotti Membership < 1.1 - Authentication Bypass via biagiotti_membership_check_facebook_user
Slug
bib2html
Published
2014-08-01
Title
bib2html 0.9.3 - /OSBiB/create/index.php styleShortName Parameter XSS
Slug
bible-embed
Published
2025-01-16
Title
Bible Embed <= 0.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bible-text
Published
2024-06-20
Title
Bible Text <= 0.2 - Contributor+ Stored XSS
Slug
biblesupersearch
Published
2025-08-20
Title
Bible SuperSearch < 6.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via selector_height Parameter
Slug
bidorbuystoreintegrator
Published
2025-08-25
Title
bidorbuy Store Integrator <= 2.12.0 - Authenticated (Admin+) Remote Code Execution
Slug
bidorbuystoreintegrator
Published
2026-01-16
Title
bidorbuy Store Integrator <= 2.12.0 - Reflected Cross-Site Scripting
Slug
big-boom-directory
Published
2025-04-02
Title
Big Boom Directory < 2.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bigbluebutton
Published
2020-04-09
Title
BigBlueButton < 2.2.4 - Reflected Cross-Site Scripting (XSS)
Slug
bigbluebutton
Published
2023-08-09
Title
BigBlueButton <= 3.0.0-beta.4 - Reflected XSS
Slug
bigbuy-wc-dropshipping-connector
Published
2025-02-17
Title
BigBuy Dropshipping Connector for WooCommerce < 2.0.1 - Unauthenticated Full Path Disclosute
Slug
bigbuy-wc-dropshipping-connector
Published
2025-11-20
Title
BigBuy Dropshipping Connector for WooCommerce <= 2.0.5 - Unauthenticated IP Spoofing to phpinfo() Exposure
Slug
bigcommerce
Published
2023-11-28
Title
BigCommerce <= 5.1.2 - Unauthenticated Sensitive Information Exposure
Slug
bigcontact
Published
2014-08-01
Title
bigcontact - SQLI
Slug
bigcontact
Published
2023-07-10
Title
BigContact <= 1.5.8 - Cross-Site Request Forgery
Slug
bigfishgames-syndicate
Published
2026-05-19
Title
Bigfishgames Syndicate <= 1.2 - Cross-Site Request Forgery to Settings Reset and Update
Slug
bigmart-elements
Published
2024-10-31
Title
Bigmart Elements <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bilingual-linker
Published
2025-01-24
Title
Bilingual Linker < 2.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
billingo
Published
2022-10-10
Title
Official Integration for Billingo < 3.4.0 - ShopManager+ Stored XSS
Slug
billingo
Published
2025-07-10
Title
Official Integration for Billingo <= 4.3.3 - Shop Manager+ Privilege Escalation