WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bookx
Published
2014-08-01
Title
BookX 1.7 - includes/bookx_export.php file Parameter Remote Path Traversal File Access
Slug
boom-fest
Published
2025-01-24
Title
Boom Fest < 2.2.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update
Slug
boombox-shortcode
Published
2024-11-08
Title
Boombox Shortcode <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
boombox-theme-extensions
Published
2025-02-03
Title
BoomBox Theme Extensions < 1.8.1 - Authenticated (Contributor+) Local File Inclusion via Shortcode
Slug
boombox-theme-extensions
Published
2025-03-18
Title
BoomBox Theme Extensions < 1.8.1 - Subscriber+ Privilege Escalation via Password Reset/Account Takeover in boombox_ajax_reset_password
Slug
booqable-rental-reservations
Published
2023-04-14
Title
Booqable Rental <= 2.4.16 - Admin+ Stored XSS
Slug
booqable-rental-reservations
Published
2025-06-05
Title
Booqable Rental <= 2.4.21 - Cross-Site Request Forgery
Slug
booster-elite-for-woocommerce
Published
2022-10-31
Title
Booster for WooCommerce - Checkout Files Deletion via CSRF
Slug
booster-elite-for-woocommerce
Published
2022-10-31
Title
Booster for WooCommerce - ShopManager+ Arbitrary File Download
Slug
booster-elite-for-woocommerce
Published
2022-09-19
Title
Booster for WooCommerce - Subscriber+ Order Status Update
Slug
booster-elite-for-woocommerce
Published
2022-11-21
Title
Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
Slug
booster-elite-for-woocommerce
Published
2022-12-05
Title
Booster for WooCommerce - Reflected Cross-Site Scripting
Slug
booster-elite-for-woocommerce
Published
2023-01-02
Title
Booster for WooCommerce - Multiple CSRF
Slug
booster-elite-for-woocommerce
Published
2023-12-27
Title
Booster Elite for WooCommerce < 7.1.3 - Subscriber+ Content Injection
Slug
booster-elite-for-woocommerce
Published
2024-01-05
Title
Booster Elite for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Slug
booster-elite-for-woocommerce
Published
2024-03-07
Title
Elite Booster for WooCommerce < 7.1.8 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
booster-extension
Published
2024-04-29
Title
Booster Extension <= 1.2.0 - Basic Information Exposure via booster_extension_authorbox_shortcode_display
Slug
booster-plus-for-woocommerce
Published
2022-09-19
Title
Booster for WooCommerce - Subscriber+ Order Status Update
Slug
booster-plus-for-woocommerce
Published
2022-10-31
Title
Booster for WooCommerce - ShopManager+ Arbitrary File Download
Slug
booster-plus-for-woocommerce
Published
2022-10-31
Title
Booster for WooCommerce - Checkout Files Deletion via CSRF
Slug
booster-plus-for-woocommerce
Published
2022-12-05
Title
Booster for WooCommerce - Reflected Cross-Site Scripting
Slug
booster-plus-for-woocommerce
Published
2022-11-21
Title
Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
Slug
booster-plus-for-woocommerce
Published
2023-01-02
Title
Booster for WooCommerce - Multiple CSRF
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.3 - Missing Authorization to Arbitrary Options Disclosure