WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bang-tinh-lai-suat
Published
2025-06-05
Title
Bang tinh vay <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
banhammer
Published
2025-09-25
Title
Banhammer < 3.4.9 - Unauthenticated Protection Mechanism Bypass
Slug
bank-mellat
Published
2022-03-01
Title
Bank Mellat < 2.0.1 - Reflected Cross-Site Scripting
Slug
banner-cycler
Published
2022-08-02
Title
Banner Cycler <= 1.4 - Stored Cross-Site Scripting via CSRF
Slug
banner-effect-header
Published
2015-01-12
Title
Banner Effect Header 1.2.6 - XSS & CSRF
Slug
banner-effect-header
Published
2015-01-30
Title
Banner Effect Header <= 1.2.7 - Cross-Site Scripting (XSS)
Slug
banner-garden
Published
2025-01-14
Title
Banner Garden Plugin for WordPress <= 0.1.3 - Reflected XSS
Slug
banner-management-for-woocommerce
Published
2018-05-29
Title
Woocommerce Category Banner Management <= 1.1.0 - Unauthenticated Settings Change
Slug
banner-management-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
banner-management-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
banner-management-for-woocommerce
Published
2023-07-26
Title
Woocommerce Category Banner Management < 2.4.3 - Shop Banner Settings Update via CSRF
Slug
banner-management-for-woocommerce
Published
2026-02-16
Title
Woocommerce Category Banner Management <= 2.5.1 - Authenticated (Contributor+) PHP Object Injection
Slug
banner-manager
Published
2025-03-24
Title
banner-manager <= 16.04.19 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
banner-slider
Published
2024-10-21
Title
Banner Slider <= 2.1 - Reflected Cross-Site Scripting
Slug
banner-system
Published
2024-11-08
Title
Banner System <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
banner-system
Published
2024-11-18
Title
Banner System <= 1.0.0 - Privilege Escalation
Slug
banner-system
Published
2024-12-12
Title
Banner System <= 1.0.0 - Missing Authorization
Slug
bannerlid
Published
2024-04-05
Title
Bannerlid <= 1.1.0 - Reflected XSS
Slug
bannerman
Published
2014-08-01
Title
BannerMan 0.2.4 - XSS in wp-admin/options-general.php via bannerman_background parameter
Slug
bannerman
Published
2022-05-09
Title
BannerMan <= 0.2.4 - Multiple Admin+ Stored Cross-Site Scripting
Slug
baqend
Published
2026-01-07
Title
Speed Kit <= 2.0.2 - Missing Authorization
Slug
barclaycart
Published
2014-03-05
Title
Barclaycart - Unauthenticated Shell Upload
Slug
barcode-scanner-lite-pos-to-manage-products-inventory-and-orders
Published
2024-01-08
Title
Barcode Scanner with Inventory & Order Manager < 1.5.2 - Unauthenticated Arbitrary File Upload via uploadFile
Slug
barcode-scanner-lite-pos-to-manage-products-inventory-and-orders
Published
2024-01-08
Title
Barcode Scanner with Inventory & Order Manager < 1.5.2 - Unauthenticated SQL Injection via userToken
Slug
barcode-scanner-lite-pos-to-manage-products-inventory-and-orders
Published
2024-03-15
Title
Barcode Scanner with Inventory & Order Manager < 1.5.4 - Reflected Cross-Site Scripting