WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bng-gateway-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bng-gateway-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bnm-blocks
Published
2025-11-10
Title
Magazine Companion < 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bnm-blocks
Published
2026-04-08
Title
Post Blocks & Tools < 1.3.1 - Authenticated (Author+) Stored Cross-Site Scripting via 'sliderStyle' Block Attribute
Slug
bns-featured-category
Published
2025-06-05
Title
BNS Featured Category <= 2.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bns-twitter-follow-button
Published
2025-05-12
Title
BNS Twitter Follow Button <= 0.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bo-wc-customer-review-watson
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
board-document-manager-from-chuhpl
Published
2024-12-05
Title
Board Document Manager from CHUHPL <= 1.9.1 - Reflected Cross-Site Scripting
Slug
board-election
Published
2025-01-16
Title
Board Election <= 1.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
boat-rental-system
Published
2024-11-11
Title
Boat Rental Plugin for WordPress <= 1.0.1 - Unauthenticated Arbitrary File Upload
Slug
bodi0s-easy-cache
Published
2024-12-13
Title
bodi0’s Easy Cache < 0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
bold-page-builder
Published
2019-08-23
Title
Bold Page Builder < 2.3.2 - Missing Access Controls
Slug
bold-page-builder
Published
2021-08-02
Title
Bold Page Builder < 3.1.6 - PHP Object Injection
Slug
bold-page-builder
Published
2022-06-20
Title
Bold Page Builder < 4.3.3 - Admin+ Stored Cross-Site Scripting
Slug
bold-page-builder
Published
2023-12-05
Title
Bold Page Builder < 4.7.0 - Contributor+ Stored XSS
Slug
bold-page-builder
Published
2024-02-12
Title
Bold Page Builder < 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Icon Link
Slug
bold-page-builder
Published
2024-02-12
Title
Bold Page Builder < 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
Slug
bold-page-builder
Published
2024-02-12
Title
Bold Page Builder < 4.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Raw Content
Slug
bold-page-builder
Published
2024-03-25
Title
Bold Page Builder < 4.7.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via class
Slug
bold-page-builder
Published
2024-04-05
Title
Bold Page Builder < 4.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget URL Attribute
Slug
bold-page-builder
Published
2024-04-05
Title
Bold Page Builder < 4.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via bt_bb_price_list Shortcode
Slug
bold-page-builder
Published
2024-04-09
Title
Bold Page Builder < 4.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Separator Element
Slug
bold-page-builder
Published
2024-04-09
Title
Bold Page Builder < 4.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via AI Features
Slug
bold-page-builder
Published
2024-04-09
Title
Bold Page Builder < 4.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via "Price List" Element
Slug
bold-page-builder
Published
2024-04-09
Title
Bold Page Builder < 4.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags