WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
breakdance
Published
2024-07-31
Title
Breakdance < 2.0.0 - Missing Authorization
Slug
breaking-news-ticker
Published
2025-02-03
Title
Breaking News Ticker <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
breaking-news-wp
Published
2025-04-01
Title
Breaking News WP <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
breaking-news-wp
Published
2025-04-01
Title
Breaking News WP <= 1.3 - Cross-Site Request Forgery to Settings Update
Slug
breeze
Published
2022-05-02
Title
Breeze < 2.0.3 - Subscriber+ Arbitrary Settings Update to Stored XSS
Slug
breeze
Published
2024-03-25
Title
Breeze < 2.1.4 - Admin+ Stored XSS
Slug
breeze
Published
2024-10-24
Title
Breeze < 2.1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
breeze
Published
2024-10-24
Title
Breeze < 2.1.15 - Missing Authorization
Slug
breeze
Published
2025-06-18
Title
Breeze < 2.2.14 - Missing Authorization
Slug
breeze
Published
2026-01-13
Title
Breeze < 2.2.22 - Missing Authorization
Slug
breeze
Published
2026-02-18
Title
Breeze – WordPress Cache Plugin < 2.2.22 - Missing Authorization to Cache Deletion
Slug
breeze-checkout
Published
2025-07-19
Title
Breeze Checkout <= 1.4.0 - Missing Authorization
Slug
breezing-forms
Published
2025-03-27
Title
Breezing Forms <= 1.2.8.11 - Reflected Cross-Site Scripting
Slug
bricksable
Published
2024-11-01
Title
Bricksable for Bricks Builder < 1.6.60 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
bricksbuilder
Published
2024-06-21
Title
Bricks Builder < 1.9.9 - Insecure Direct Object Reference
Slug
brickscore
Published
2024-08-26
Title
Brickscore <= 1.4.2.5 - Unauthenticated Stored Cross-Site Scripting
Slug
bricksforge
Published
2024-04-05
Title
Bricksforge < 2.1.1 - Missing Authorization to Unauthenticated Arbitrary Email Sending
Slug
bricksforge
Published
2024-04-05
Title
Bricksforge < 2.1.1 - Missing Authorization to Unauthenticated WordPress Settings Update
Slug
bricksforge
Published
2024-04-05
Title
Bricksforge < 2.1.1 - Missing Authorization to Unauthenticated WordPress Settings Deletion
Slug
brid-video-easy-publish
Published
2025-01-24
Title
Target Video Easy Publish < 3.8.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
brid-video-easy-publish
Published
2025-01-28
Title
Target Video Easy Publish < 3.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via brid_override_yt Shortcode
Slug
brid-video-easy-publish
Published
2025-04-17
Title
Target Video Easy Publish <= 3.8.9 - Subscriber+ Arbitrary Shortcode Execution
Slug
brid-video-easy-publish
Published
2025-06-17
Title
Target Video Easy Publish < 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Slug
brid-video-easy-publish
Published
2026-01-27
Title
Target Video Easy Publish < 3.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder_img Parameter
Slug
bridge-core
Published
2023-08-29
Title
Bridge Core < 3.1.0 - Reflected XSS