WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bakkbone-florist-companion
Published
2024-12-02
Title
FloristPress < 7.4.0 - Missing Authorization to Sensitive Data Exposure
Slug
bakkbone-florist-companion
Published
2024-12-02
Title
FloristPress < 7.4.0 - Missing Authorization to Arbitrary Content Deletion
Slug
bakkbone-florist-companion
Published
2024-12-11
Title
FloristPress < 7.3.0 - Reflected Cross-Site Scripting
Slug
bakkbone-florist-companion
Published
2026-03-25
Title
FloristPress for Woo < 7.8.3 - Reflected Cross-Site Scripting via 'noresults' Parameter
Slug
bamazoo-button-generator
Published
2024-10-24
Title
Bamazoo – Button Generator <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via dgs Shortcode
Slug
bamboo-columns
Published
2023-11-15
Title
Bamboo Columns <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bamboo-enquiries
Published
2024-11-08
Title
Bamboo Enquiries <= 1.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ban-users
Published
2023-09-12
Title
BAN Users <= 1.5.3 - Subscriber+ Settings Update & Privilege Escalation via Missing Authorization
Slug
bandsintown
Published
2025-02-19
Title
Bandsintown Events < 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bang-tinh-lai-suat
Published
2025-06-05
Title
Bang tinh vay <= 1.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
banhammer
Published
2025-09-25
Title
Banhammer < 3.4.9 - Unauthenticated Protection Mechanism Bypass
Slug
bank-mellat
Published
2022-03-01
Title
Bank Mellat < 2.0.1 - Reflected Cross-Site Scripting
Slug
banner-cycler
Published
2022-08-02
Title
Banner Cycler <= 1.4 - Stored Cross-Site Scripting via CSRF
Slug
banner-effect-header
Published
2015-01-12
Title
Banner Effect Header 1.2.6 - XSS & CSRF
Slug
banner-effect-header
Published
2015-01-30
Title
Banner Effect Header <= 1.2.7 - Cross-Site Scripting (XSS)
Slug
banner-garden
Published
2025-01-14
Title
Banner Garden Plugin for WordPress <= 0.1.3 - Reflected XSS
Slug
banner-management-for-woocommerce
Published
2018-05-29
Title
Woocommerce Category Banner Management <= 1.1.0 - Unauthenticated Settings Change
Slug
banner-management-for-woocommerce
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
banner-management-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
banner-management-for-woocommerce
Published
2023-07-26
Title
Woocommerce Category Banner Management < 2.4.3 - Shop Banner Settings Update via CSRF
Slug
banner-management-for-woocommerce
Published
2026-02-16
Title
Woocommerce Category Banner Management <= 2.5.1 - Authenticated (Contributor+) PHP Object Injection
Slug
banner-manager
Published
2025-03-24
Title
banner-manager <= 16.04.19 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
banner-slider
Published
2024-10-21
Title
Banner Slider <= 2.1 - Reflected Cross-Site Scripting
Slug
banner-system
Published
2024-11-08
Title
Banner System <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
banner-system
Published
2024-11-18
Title
Banner System <= 1.0.0 - Privilege Escalation