WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
billplz-for-contact-form-7
Published
2025-08-13
Title
Billplz Addon for Contact Form 7 < 1.2.1 - Reflected Cross-Site Scripting
Slug
biltorvet-dealer-tools
Published
2025-01-07
Title
Biltorvet Dealer Tools <= 1.0.22 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bin-stripe-donation
Published
2024-11-28
Title
Stripe Donation <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bin-stripe-donation
Published
2024-12-13
Title
Stripe Donation <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
binary-mlm-plan
Published
2025-05-21
Title
Binary MLM Plan < 5.0 - Unauthenticated SQL Injection
Slug
binary-mlm-plan
Published
2025-10-14
Title
Binary MLM Plan < 5.0 - Unauthenticated Limited Privilege Escalation
Slug
binary-mlm-plan
Published
2025-10-16
Title
Binary MLM Plan <= 5.0 - Authenticated (Subscriber+) Insecure Direct Object Reference
Slug
bing-site-verification-using-meta-tag
Published
2023-02-20
Title
Bing Site Verification using Meta Tag <= 1.0 - Admin+ Stored XSS
Slug
binlayerpress
Published
2025-03-11
Title
binlayerpress <= 1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
biometric-login-for-woocommerce
Published
2023-08-08
Title
Biometric Login for WooCommerce < 1.0.4 - Unauthenticated Privilege Escalation
Slug
bird-feeder
Published
2014-12-17
Title
Bird Feeder <= 1.2.3 - CSRF & XSS
Slug
birdseed
Published
2026-06-01
Title
BirdSeed <= 2.2.0 - Cross-Site Request Forgery via BirdSeed Token Change
Slug
birth-chart-compatibility
Published
2025-07-21
Title
Birth Chart Compatibility <= 2.0 - Unauthenticated Full Path Exposure
Slug
birthdays-widget
Published
2022-05-09
Title
Birthdays Widget <= 1.7.18 - Admin+ Stored Cross Site Scripting
Slug
bit-assist
Published
2023-07-27
Title
Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting
Slug
bit-assist
Published
2023-09-18
Title
Bit Assist < 1.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
bit-assist
Published
2025-02-13
Title
Bit Assist < 1.5.3 - Authenticated (Subscriber+) SQL Injection via id Parameter
Slug
bit-assist
Published
2025-02-13
Title
Bit Assist < 1.5.3 - Admin+ Arbitrary File Read
Slug
bit-assist
Published
2025-02-14
Title
Bit Assist < 1.5.3 - Subscriber+ Arbitrary File Read via fileID Parameter
Slug
bit-assist
Published
2025-03-28
Title
Bit Assist < 1.5.5 - Unauthenticated Path Traversal
Slug
bit-assist
Published
2025-12-19
Title
Bit Assist < 1.6.0 - Missing Authorization
Slug
bit-assist
Published
2026-07-27
Title
Bit Assist < 1.8.2 - Unauthenticated Arbitrary File Upload via Response Endpoint
Slug
bit-form
Published
2023-04-19
Title
Bit Form < 1.9 - RCE via Unauthenticated Arbitrary File Upload
Slug
bit-form
Published
2023-07-24
Title
Contact Form Builder by Bit Form < 2.2.0 - Admin+ Stored XSS
Slug
bit-form
Published
2024-03-13
Title
Contact Form Builder Plugin: Multi Step Contact Form, Payment Form, Custom Contact Form Plugin by Bit Form < 2.10.2 - Unauthenticated Insecure Direct Object Reference to Form Submission Alteration