WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bit-form
Published
2025-08-14
Title
Contact Form by Bit Form - Bit Form < 2.20.4 - Unauthenticated Arbitrary File Upload
Slug
bit-form
Published
2026-01-06
Title
Bit Form – Contact Form Plugin < 2.21.7 - Missing Authorization to Unauthenticated Workflow Replay
Slug
bit-form
Published
2026-01-28
Title
Bit Form < 2.21.11 - Authenticated (Administrator+) SQL Injection
Slug
bit-integrations
Published
2025-03-27
Title
Bit Integrations < 2.5.0 - Open Redirect
Slug
bitcoin-donate-button
Published
2026-01-27
Title
Bitcoin Donate Button <= 1.0 - Cross-Site Request Forgery to Settings Update
Slug
bitcoin-faucet
Published
2022-08-31
Title
Bitcoin / Altcoin Faucet <= 1.6.0 - Settings Update to Stored XSS via CSRF
Slug
bitcoin-lightning-publisher
Published
2024-12-23
Title
Bitcoin Lightning Publisher for WordPress < 1.4.2 - Reflected Cross-Site Scripting
Slug
bitcoin-payments
Published
2024-11-08
Title
Bitcoin Payments <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
biteship
Published
2023-12-04
Title
Biteship < 2.2.28 - Shop manager+ Stored XSS
Slug
biteship
Published
2023-11-17
Title
Biteship for WooCommerce < 2.2.25 - Reflected Cross-Site Scripting
Slug
biteship
Published
2024-02-02
Title
Biteship < 2.2.25 - Reflected Cross-Site Scripting via biteship_error and biteship_message
Slug
biteship
Published
2025-07-17
Title
Plugin Pengiriman WooCommerce Kurir Reguler, Instan, Kargo – Biteship <= 3.2.0 - Insecure Direct Object Reference to Authenticated (Subscriber+) View Order Tracking Details
Slug
bitfire
Published
2025-08-01
Title
BitFire < 4.6 - Unauthenticated Information Exposure
Slug
bitformpro
Published
2024-08-12
Title
Bit Form Pro < 2.8.0 - Missing Authorization to Authenticated (Subscriber+) Settings Update
Slug
bitformpro
Published
2024-08-12
Title
Bit Form Pro < 2.8.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
bitformpro
Published
2024-08-12
Title
Bit Form Pro < 2.8.0 - Unauthenticated Arbitrary File Deletion
Slug
bitformpro
Published
2024-08-12
Title
Bit Form Pro < 2.8.0 - Authenticated (Subscriber+) Sensitive Information Exposure
Slug
bitly-linker
Published
2025-01-16
Title
Bit.ly linker <= 1.1 - Reflected Cross-Site Scripting
Slug
bitpay-checkout-for-woocommerce
Published
2023-09-05
Title
BitPay Checkout for WooCommerce < 5.0.0 - Missing Authorization
Slug
bitspecter-suite
Published
2025-03-21
Title
Bitspecter Suite < 1.1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
bizapp-for-woocommerce
Published
2025-01-06
Title
Bizapp for WooCommerce <= 2.0.8 - Reflected Cross-Site Scripting
Slug
bizcalendar-web
Published
2024-04-09
Title
BizCalendar Web < 1.1.0.26 - Reflected XSS
Slug
bizcalendar-web
Published
2025-03-27
Title
bizcalendar-web < 1.1.0.35 - Authenticated (Administrator+) SQL Injection
Slug
bizcalendar-web
Published
2025-08-14
Title
BizCalendar Web < 1.1.0.54 - Authenticated (Contributor+) Local File Inclusion
Slug
bizlibrary
Published
2023-04-19
Title
BizLibrary <= 1.1 - Admin+ Stored XSS