WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
brands-for-woocommerce
Published
2023-09-22
Title
Brands for WooCommerce < 3.8.2.3 - Cross-Site Request Forgery
Slug
brands-for-woocommerce
Published
2025-12-26
Title
Brands for WooCommerce < 3.8.6.4 - Authenticated (Contributor+) SQL Injection
Slug
brands-for-woocommerce
Published
2026-07-22
Title
Brands for WooCommerce < 3.8.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute
Slug
brands-for-woocommerce
Published
2026-07-23
Title
Brands for WooCommerce < 3.8.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute
Slug
brands-for-woocommerce
Published
2026-07-22
Title
Brands for WooCommerce < 3.8.8.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field
Slug
brave-popup-builder
Published
2023-12-27
Title
Brave Popup Builder < 0.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
brave-popup-builder
Published
2024-03-28
Title
Brave Popup Builder < 0.6.6 - Unauthenticated Server-Side Request Forgery
Slug
brave-popup-builder
Published
2024-06-03
Title
Brave < 0.7.0 - Admin+ Stored XSS
Slug
brave-popup-builder
Published
2024-08-16
Title
Brave Popup Builder < 0.7.1 - Cross-Site Request Forgery
Slug
brave-popup-builder
Published
2025-12-23
Title
Brave < 0.8.4 - Missing Authorization
Slug
brave-popup-builder
Published
2026-08-21
Title
Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters
Slug
brave-popup-builder
Published
2026-08-21
Title
Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview
Slug
brave-popup-builder
Published
2026-08-31
Title
Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter
Slug
bravepopup-pro
Published
2025-08-01
Title
Brave Conversion Engine (PRO) < 0.8.0 - Authentication Bypass
Slug
bravepopup-pro
Published
2026-08-24
Title
Brave Conversion Engine (PRO) < 0.8.7 - Unauthenticated Stored Cross-Site Scripting
Slug
bravis-addons
Published
2026-02-11
Title
Bravis Addons < 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
bravis-user
Published
2025-08-22
Title
Bravis User <= 1.0.0 - Authentication Bypass to Account Takeover
Slug
bravo-search-and-replace
Published
2025-02-24
Title
Bravo Search & Replace <= 1.0 - Authenticated (Administrator+) SQL Injection
Slug
bravo-translate
Published
2023-11-28
Title
Bravo Translate <= 1.2 - Authenticated (Administrator+) SQL Injection
Slug
bread-butter
Published
2024-11-08
Title
Bread & Butter < 7.5.880 - Contributor+ Stored XSS
Slug
bread-butter
Published
2025-12-04
Title
Bread & Butter < 8.0.1398 - Arbitrary File Upload via CSRF
Slug
bread-butter
Published
2026-04-21
Title
Bread & Butter: Content Gating for Verified Leads < 8.7.0.139 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
breadcrumb
Published
2023-01-11
Title
Breadcrumb < 1.5.33 - Contributor+ Stored XSS via Shortcode
Slug
breadcrumb-navxt
Published
2018-09-28
Title
Breadcrumb NavXT < 6.2.0 - Username Disclosure via REST API
Slug
breadcrumb-navxt
Published
2026-02-18
Title
Breadcrumb NavXT < 7.5.1 - Sensitive Information Exposure