WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
breadcrumb-navxt
Published
2026-09-02
Title
Breadcrumb NavXT < 7.5.2 - Unauthenticated Stored XSS
Slug
breadcrumb-simple
Published
2023-08-30
Title
breadcrumb simple <= 1.3 - Admin+ Stored XSS
Slug
breadcrumbs-by-menu
Published
2019-06-08
Title
Breadcrumbs by menu < 1.0.3 - Multiple Issues
Slug
breadcrumbs-shortcode
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
breakdance
Published
2024-05-03
Title
Breakdance < 1.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom postmeta
Slug
breakdance
Published
2024-05-08
Title
Breakdance < 1.7.2 - Authenticated (Contributor+) Remote Code Execution
Slug
breakdance
Published
2024-07-31
Title
Breakdance < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
breakdance
Published
2024-07-31
Title
Breakdance < 2.0.0 - Missing Authorization
Slug
breakdance
Published
2026-07-10
Title
Breakdance < 2.7.2 - Unauthenticated Stored Cross-Site Scripting
Slug
breakdance
Published
2026-07-15
Title
Breakdance < 2.7.2 - Unauthenticated Stored Cross-Site Scripting via Webhook Action Details
Slug
breakdance
Published
2026-07-28
Title
Breakdance < 2.6.2 - Missing Authorization
Slug
breaking-news-ticker
Published
2025-02-03
Title
Breaking News Ticker <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
breaking-news-wp
Published
2025-04-01
Title
Breaking News WP <= 1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
breaking-news-wp
Published
2025-04-01
Title
Breaking News WP <= 1.3 - Cross-Site Request Forgery to Settings Update
Slug
breaking-news-wp
Published
2026-04-21
Title
Breaking News WP <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Local File Inclusion/Read
Slug
breeze
Published
2022-05-02
Title
Breeze < 2.0.3 - Subscriber+ Arbitrary Settings Update to Stored XSS
Slug
breeze
Published
2024-03-25
Title
Breeze < 2.1.4 - Admin+ Stored XSS
Slug
breeze
Published
2024-10-24
Title
Breeze < 2.1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
breeze
Published
2024-10-24
Title
Breeze < 2.1.15 - Missing Authorization
Slug
breeze
Published
2025-06-18
Title
Breeze < 2.2.14 - Missing Authorization
Slug
breeze
Published
2026-01-13
Title
Breeze < 2.2.22 - Missing Authorization
Slug
breeze
Published
2026-02-18
Title
Breeze – WordPress Cache Plugin < 2.2.22 - Missing Authorization to Cache Deletion
Slug
breeze
Published
2026-04-22
Title
Breeze Cache < 2.4.5 - Unauthenticated Arbitrary File Upload
Slug
breeze
Published
2026-05-28
Title
Breeze Cache < 2.5.3 - Unauthenticated Exposure of Sensitive Information to an Unauthorized Actor via Crafted Login Cookie
Slug
breeze
Published
2026-06-22
Title
Breeze Cache < 2.5.6 - Unauthenticated Stored XSS via Minify Library