WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
booster-plus-for-woocommerce
Published
2022-12-05
Title
Booster for WooCommerce - Reflected Cross-Site Scripting
Slug
booster-plus-for-woocommerce
Published
2022-11-21
Title
Booster for WooCommerce - Custom Role Creation/Deletion via CSRF
Slug
booster-plus-for-woocommerce
Published
2023-01-02
Title
Booster for WooCommerce - Multiple CSRF
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Order Information Disclosure
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.3 - Missing Authorization to Arbitrary Options Disclosure
Slug
booster-plus-for-woocommerce
Published
2024-01-05
Title
Booster Plus for WooCommerce < 7.1.2 - Missing Authorization to Arbitrary Page/Post Deletion
Slug
booster-plus-for-woocommerce
Published
2025-04-17
Title
Booster Plus for WooCommerce < 7.2.5 - Reflected Cross-Site Scripting
Slug
boostify-header-footer-builder
Published
2024-06-04
Title
Boostify Header Footer Builder for Elementor < 1.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via size Parameter
Slug
boostify-header-footer-builder
Published
2024-06-05
Title
Boostify Header Footer Builder for Elementor < 1.3.6 - Missing Authorization to Page/Post Creation
Slug
boostify-header-footer-builder
Published
2024-11-12
Title
Boostify Header Footer Builder for Elementor < 1.3.7 - Authenticated (Contributor+) Post Disclosure
Slug
boot-modal
Published
2025-01-07
Title
Boot-Modal < 1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
booter-bots-crawlers-manager
Published
2026-01-25
Title
Booter < 1.5.8 - Missing Authorization
Slug
bootstrap-buttons
Published
2024-12-14
Title
Bootstrap Buttons <= 1.2 - Reflected Cross-Site Scripting
Slug
bootstrap-collapse
Published
2025-02-13
Title
Bootstrap collapse <= 1.0.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bootstrap-modals
Published
2025-12-31
Title
Bootstrap Modals <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bootstrap-multi-language-responsive-portfolio
Published
2025-11-03
Title
Multi-language Responsive Portfolio WordPress <= 1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
bootstrap-shortcode
Published
2026-05-11
Title
Bootstrap Shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'box' Shortcode
Slug
bootstrap-shortcodes
Published
2023-01-26
Title
Bootstrap Shortcodes <= 3.4.0 - Contributor+ Stored XSS via Shortcode
Slug
bopo-woo-product-bundle-builder
Published
2026-06-26
Title
Bopo – WooCommerce Product Bundle Builder < 1.2.0 - Unauthenticated Sensitive Information Exposure
Slug
bopo-woo-product-bundle-builder
Published
2026-07-08
Title
Bopo – WooCommerce Product Bundle Builder < 1.2.1 - Reflected Cross-Site Scripting
Slug
border-loading-bar
Published
2021-09-09
Title
Border Loading Bar <= 1.0.1 - Reflected Cross-Site Scripting
Slug
border-loading-bar
Published
2021-08-09
Title
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Slug
borderless
Published
2023-07-20
Title
Borderless < 1.4.9 - Admin+ Stored XSS
Slug
borderless
Published
2024-05-14
Title
Borderless - Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg < 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Slug
borderless
Published
2024-05-14
Title
Borderless – Widgets, Elements, Templates and Toolkit for Elementor & Gutenberg < 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting