WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bradmax-player
Published
2024-07-10
Title
Bradmax Player < 1.1.28 - Contributor+ Stored XSS
Slug
brand-my-footer
Published
2024-11-08
Title
Brand my Footer <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
branda-white-labeling
Published
2023-12-27
Title
Branda < 3.4.15 - IP Spoofing
Slug
branda-white-labeling
Published
2024-06-20
Title
Branda – White Label WordPress, Custom Login Page Customizer < 3.4.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG Upload
Slug
branda-white-labeling
Published
2024-06-28
Title
Branda < 3.4.18 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
branda-white-labeling
Published
2024-07-10
Title
Branda – White Label WordPress, Custom Login Page Customizer < 3.4.19 - Unauthenticated Full Path Disclosure
Slug
branda-white-labeling
Published
2024-11-20
Title
Branda – White Label & Branding, Custom Login Page Customizer < 3.4.22 - Reflected Cross-Site Scripting
Slug
branda-white-labeling
Published
2026-01-01
Title
Branda – White Label & Branding, Free Login Page Customizer < 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover
Slug
branda-white-labeling
Published
2026-06-19
Title
Branda – White Label & Branding, Free Login Page Customizer < 3.4.31 - Unauthenticated Privilege Escalation via Account Takeover
Slug
branda-white-labeling
Published
2026-09-30
Title
Branda – White Label & Branding, Free Login Page Customizer < 3.4.33 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
brandfolder
Published
2016-03-23
Title
Brandfolder <= 3.0 - File Inclusion
Slug
brandfolder
Published
2025-07-15
Title
Brandfolder < 5.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
brandfolder
Published
2026-06-15
Title
Brandfolder – Digital Asset Management Simplified. <= 3.0 - Unauthenticated Local File Inclusion
Slug
branding
Published
2024-10-17
Title
Branding <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
brands-for-woocommerce
Published
2023-05-10
Title
Brands for WooCommerce < 3.8.2 - Contributor+ Stored XSS
Slug
brands-for-woocommerce
Published
2023-09-22
Title
Brands for WooCommerce < 3.8.2.3 - Missing Authorization to Unauthenticated Order Manipulation and Information Retrieval
Slug
brands-for-woocommerce
Published
2023-09-22
Title
Brands for WooCommerce < 3.8.2.3 - Cross-Site Request Forgery
Slug
brands-for-woocommerce
Published
2025-12-26
Title
Brands for WooCommerce < 3.8.6.4 - Authenticated (Contributor+) SQL Injection
Slug
brands-for-woocommerce
Published
2026-07-22
Title
Brands for WooCommerce < 3.8.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'style' Shortcode Attribute
Slug
brands-for-woocommerce
Published
2026-07-23
Title
Brands for WooCommerce < 3.8.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'width' Shortcode Attribute
Slug
brands-for-woocommerce
Published
2026-07-22
Title
Brands for WooCommerce < 3.8.8.1 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via 'br_brand_tooltip' Term Meta Field
Slug
brave-popup-builder
Published
2023-12-27
Title
Brave Popup Builder < 0.6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
brave-popup-builder
Published
2024-03-28
Title
Brave Popup Builder < 0.6.6 - Unauthenticated Server-Side Request Forgery
Slug
brave-popup-builder
Published
2024-06-03
Title
Brave < 0.7.0 - Admin+ Stored XSS
Slug
brave-popup-builder
Published
2024-08-16
Title
Brave Popup Builder < 0.7.1 - Cross-Site Request Forgery