WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bricksforge
Published
2024-04-05
Title
Bricksforge < 2.1.1 - Missing Authorization to Unauthenticated WordPress Settings Update
Slug
bricksforge
Published
2024-04-05
Title
Bricksforge < 2.1.1 - Missing Authorization to Unauthenticated WordPress Settings Deletion
Slug
bricksforge
Published
2026-04-06
Title
Bricksforge < 3.1.8.5 - Unauthenticated Information Exposure
Slug
brid-video-easy-publish
Published
2025-01-24
Title
Target Video Easy Publish < 3.8.4 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
brid-video-easy-publish
Published
2025-01-28
Title
Target Video Easy Publish < 3.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via brid_override_yt Shortcode
Slug
brid-video-easy-publish
Published
2025-04-17
Title
Target Video Easy Publish <= 3.8.9 - Subscriber+ Arbitrary Shortcode Execution
Slug
brid-video-easy-publish
Published
2025-06-17
Title
Target Video Easy Publish < 3.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via width Parameter
Slug
brid-video-easy-publish
Published
2026-01-27
Title
Target Video Easy Publish < 3.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via placeholder_img Parameter
Slug
bridge-core
Published
2023-08-29
Title
Bridge Core < 3.1.0 - Reflected XSS
Slug
bridge-core
Published
2024-10-07
Title
Bridge Core < 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
bridge-core
Published
2024-10-11
Title
Bridge Core < 3.3.1 - Missing Authorization to Authenticated (Subscriber+) Demo Import
Slug
bridge-core
Published
2025-01-24
Title
Bridge Core < 3.3.1 - Missing Authorization
Slug
bridge-core
Published
2025-03-31
Title
Bridge Core < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
brighttalk-wp-shortcode
Published
2025-11-20
Title
BrightTALK WordPress Shortcode <= 2.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bring-fraktguiden-for-woocommerce
Published
2025-04-16
Title
Bring Fraktguiden for WooCommerce < 1.11.5 - Missing Authorization
Slug
britetechs-companion
Published
2024-06-24
Title
Various Plugins - Injected Backdoor
Slug
brizy
Published
2020-06-10
Title
Brizy - Page Builder < 1.0.126 - Improper Access Controls on AJAX Calls
Slug
brizy
Published
2020-03-05
Title
Brizy - Page Builder < 1.0.114 - Unauthenticated Site Settings Update
Slug
brizy
Published
2021-10-13
Title
Brizy 1.0.127 - 2.3.11 - Incorrect Authorization to Post Modification
Slug
brizy
Published
2021-10-13
Title
Brizy < 2.3.12 - Authenticated Stored Cross-Site Scripting
Slug
brizy
Published
2021-10-13
Title
Brizy < 2.3.12 - Authenticated File Upload and Path Traversal
Slug
brizy
Published
2022-06-21
Title
Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element URL
Slug
brizy
Published
2022-06-21
Title
Brizy Page Builder < 2.4.2 - Contributor+ Stored Cross-Site Scripting via Element Content
Slug
brizy
Published
2023-11-06
Title
Brizy < 2.4.30 - Contributor+ Stored XSS
Slug
brizy
Published
2024-02-23
Title
Brizy – Page Builder < 2.4.41 - Authenticated (Contributor+) Stored Cross-Site Scripting