WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
broken-link-checker-seo
Published
2025-12-09
Title
Broken Link Checker < 1.2.7 - Authenticated (Author+) SQL Injection
Slug
broken-link-finder
Published
2023-10-16
Title
Broken Link Checker | Finder < 2.5.0 - Missing Authorization via moblc_auth_save_settings
Slug
broken-link-finder
Published
2024-12-18
Title
Broken Link Checker | Finder < 2.5.1 - Authenticated (Author+) Blind Server-Side Request Forgery
Slug
broken-link-manager
Published
2015-07-04
Title
Broken Link Manager < 0.5.0 - Unauthenticated SQL Injection & XSS
Slug
broken-link-manager
Published
2015-07-16
Title
Broken Link Manager < 0.6.0 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
broken-link-manager
Published
2021-07-24
Title
Broken Link Manager <= 0.6.5 - Authenticated (admin+) SQL Injection
Slug
broken-link-manager
Published
2025-11-03
Title
Broken Link Manager <= 0.6.5 - Reflected XSS
Slug
broken-link-notifier
Published
2025-07-10
Title
Broken Link Notifier < 1.3.1 - Unauthenticated Server-Side Request Forgery
Slug
broken-link-notifier
Published
2025-07-10
Title
Broken Link Notifier < 1.3.1 - Authenticated (Contributor+) CSV Injection
Slug
broken-link-notifier
Published
2026-01-29
Title
Broken Link Notifier < 1.3.6 - Missing Authorization
Slug
broken-links-remover
Published
2025-04-17
Title
Broken Links Remover <= 1.2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
browse-as
Published
2025-05-29
Title
Browse As <= 0.2 - Subscriber+ Authentication Bypass via Cookie
Slug
browser-address-bar-color
Published
2025-03-24
Title
Browser Address Bar Color < 3.4.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
browser-and-operating-system-finder
Published
2022-06-02
Title
Browser and Operating System Finder <= 1.2 - Unauthenticated Settings Reset
Slug
browser-and-operating-system-finder
Published
2021-11-25
Title
Browser and Operating System Finder <= 1.2 - Unauthenticated Arbitrary Settings Update to Stored XSS
Slug
browser-caching-with-htaccess
Published
2025-03-28
Title
Browser Caching with .htaccess 1.2.1 - Cross-Site Request Forgery
Slug
browser-rejector
Published
2014-08-01
Title
Browser Rejector - Remote & Local File Inclusion
Slug
browser-shots
Published
2021-06-21
Title
Browser Screenshots < 1.7.6 - Contributor+ Stored XSS
Slug
browser-sniff
Published
2025-09-19
Title
Browser Sniff <= 2.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
browser-theme-color
Published
2024-01-17
Title
Browser Theme Color < 1.4 - Settings Update via CSRF
Slug
browser-update-notify
Published
2025-01-16
Title
Browser-Update-Notify <= 0.2.1 - Reflected Cross-Site Scripting
Slug
browsing-history
Published
2024-11-08
Title
Browsing History <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
brozzme-scroll-top
Published
2024-05-06
Title
Brozzme Scroll Top <= 1.8.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
brute-force-login-protection
Published
2014-07-26
Title
Brute Force Login Protection <= 1.5.3 - Arbitrary IP Removal/Add via CSRF
Slug
brutebank
Published
2022-12-28
Title
BruteBank - WP Security & Firewall < 1.9 - Settings Update via CSRF