WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
browser-address-bar-color
Published
2025-03-24
Title
Browser Address Bar Color < 3.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
browser-and-operating-system-finder
Published
2022-06-02
Title
Browser and Operating System Finder <= 1.2 - Unauthenticated Settings Reset
Slug
browser-and-operating-system-finder
Published
2021-11-25
Title
Browser and Operating System Finder <= 1.2 - Unauthenticated Arbitrary Settings Update to Stored XSS
Slug
browser-caching-with-htaccess
Published
2025-03-28
Title
Browser Caching with .htaccess 1.2.1 - Cross-Site Request Forgery
Slug
browser-rejector
Published
2014-08-01
Title
Browser Rejector - Remote & Local File Inclusion
Slug
browser-shots
Published
2021-06-21
Title
Browser Screenshots < 1.7.6 - Contributor+ Stored XSS
Slug
browser-sniff
Published
2025-09-19
Title
Browser Sniff <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
browser-theme-color
Published
2024-01-17
Title
Browser Theme Color < 1.4 - Settings Update via CSRF
Slug
browser-update-notify
Published
2025-01-16
Title
Browser-Update-Notify <= 0.2.1 - Reflected Cross-Site Scripting
Slug
browsing-history
Published
2024-11-08
Title
Browsing History <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
brozzme-scroll-top
Published
2024-05-06
Title
Brozzme Scroll Top <= 1.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
brute-force-login-protection
Published
2014-07-26
Title
Brute Force Login Protection <= 1.5.3 - Arbitrary IP Removal/Add via CSRF
Slug
brutebank
Published
2022-12-28
Title
BruteBank - WP Security & Firewall < 1.9 - Settings Update via CSRF
Slug
bruteguard
Published
2025-04-17
Title
BruteGuard – Brute Force Login Protection <= 0.1.4 - Reflected Cross-Site Scripting
Slug
brzon
Published
2025-11-03
Title
Associados Amazon Plugin <= 0.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bs-shortcode-ultimate
Published
2023-11-20
Title
Bootstrap Shortcodes Ultimate <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bsd-woo-stripe-connect-split-pay
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bsd-woo-stripe-connect-split-pay
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bsecure
Published
2025-07-03
Title
bSecure – Your Universal Checkout <= 1.7.9 - Unauthenticated SQL Injection
Slug
bsecure
Published
2025-07-21
Title
bSecure 1.3.7 - 1.7.9 - Missing Authorization to Unauthenticated Privilege Escalation via order_info REST Endpoint
Slug
bsi-hotel-pro
Published
2020-04-04
Title
Online Hotel Booking System Pro <= 1.1 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
bsk-contact-form-7-blacklist
Published
2023-11-13
Title
BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site Scripting
Slug
bsk-gravityforms-blacklist
Published
2023-11-28
Title
BSK Forms Blacklist < 3.7 - Admin+ Stored Cross-Site Scripting
Slug
bsk-gravityforms-blacklist
Published
2024-08-09
Title
BSK Forms Blacklist < 3.8.1 - Reflected Cross-Site Scripting
Slug
bsk-gravityforms-blacklist
Published
2024-09-30
Title
BSK Forms Blacklist < 3.9 - Reflected Cross-Site Scripting