WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bizlibrary
Published
2025-01-16
Title
BizLibrary <= 1.1 - Reflected Cross-Site Scripting
Slug
bj-lazy-load
Published
2015-09-02
Title
BJ Lazy Load < 1.0 - Remote File Inclusion (Timthumb)
Slug
bknewsticker
Published
2025-04-17
Title
Bknewsticker <= 1.0.5 - Cross-Site Request Forgery
Slug
black-widgets
Published
2024-08-01
Title
Black Widgets For Elementor < 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
black-widgets
Published
2024-08-01
Title
Black Widgets For Elementor < 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
black-widgets
Published
2024-10-29
Title
Black Widgets For Elementor < 1.3.8 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
black-widgets
Published
2024-11-01
Title
Black Widgets For Elementor < 1.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
black-widgets
Published
2025-01-07
Title
Black Widgets For Elementor < 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
black-widgets
Published
2025-04-01
Title
Black Widgets For Elementor <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blackhole-bad-bots
Published
2022-01-31
Title
Blackhole for Bad Bots < 3.3.2 - Arbitrary IP Address Blocking via IP Spoofing
Slug
blaze-demo-importer
Published
2025-09-15
Title
Blaze Demo Importer < 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install
Slug
blaze-demo-importer
Published
2025-12-11
Title
Blaze Demo Importer 1.0.0 - 1.0.13 - Missing Authorization to Authenticated (Subscriber+) Database Reset and File Deletion
Slug
blaze-online-eparcel-for-woocommerce
Published
2024-12-06
Title
Blaze Online eParcel for WooCommerce <= 1.3.3 - Reflected Cross-Site Scripting
Slug
blaze-slide-show-for-wordpress
Published
2014-08-01
Title
SWFUpload - Cross-Site Scripting (XSS)
Slug
blaze-slide-show-for-wordpress
Published
2014-08-01
Title
Blaze Slideshow 2.1 - Unspecified Security
Slug
blaze-widget
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
blighty-explorer
Published
2025-02-24
Title
Blightly Explorer <= 2.3.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
blizzard-quotes
Published
2024-11-23
Title
Blizzard Quotes <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
blnmrpb
Published
2020-01-27
Title
blnmrpb - Webshell in Fake Plugin
Slug
blobinator
Published
2021-06-30
Title
Cognitive Content Analyzer < 2.3 - Unauthorised AJAX call via CSRF
Slug
block-controller
Published
2024-12-02
Title
Block Controller <= 1.4.3 - Reflected Cross-Site Scripting
Slug
block-country
Published
2025-10-13
Title
Block Country <= 1.0 - Cross-Site Request Forgery
Slug
block-editor-bootstrap-blocks
Published
2024-11-20
Title
Block Editor Bootstrap Blocks < 6.6.2 - Reflected Cross-Site Scripting via tab
Slug
block-editor-gallery-slider
Published
2025-07-17
Title
Block Editor Gallery Slider < 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update
Slug
block-for-font-awesome
Published
2023-12-04
Title
Block for Font Awesome < 1.4.1 -Settings Update via CSRF