WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
brave-popup-builder
Published
2025-12-23
Title
Brave < 0.8.4 - Missing Authorization
Slug
brave-popup-builder
Published
2026-08-21
Title
Brave Popup Builder < 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters
Slug
brave-popup-builder
Published
2026-08-21
Title
Brave Popup Builder < 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview
Slug
brave-popup-builder
Published
2026-08-31
Title
Brave Popup Builder < 0.8.8 - Unauthenticated Arbitrary Shortcode Execution via UTM Parameter
Slug
brave-popup-builder
Published
2026-10-29
Title
Brave – Create Popup, Optins, Lead Generation, Survey, Sticky Elements & Interactive Content < 0.8.9 - Unauthenticated Arbitrary Content Injection
Slug
bravepopup-pro
Published
2025-08-01
Title
Brave Conversion Engine (PRO) < 0.8.0 - Authentication Bypass
Slug
bravepopup-pro
Published
2026-08-24
Title
Brave Conversion Engine (PRO) < 0.8.7 - Unauthenticated Stored Cross-Site Scripting
Slug
bravis-addons
Published
2026-02-11
Title
Bravis Addons < 1.3.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
bravis-user
Published
2025-08-22
Title
Bravis User <= 1.0.0 - Authentication Bypass to Account Takeover
Slug
bravo-search-and-replace
Published
2025-02-24
Title
Bravo Search & Replace <= 1.0 - Authenticated (Administrator+) SQL Injection
Slug
bravo-translate
Published
2023-11-28
Title
Bravo Translate <= 1.2 - Authenticated (Administrator+) SQL Injection
Slug
bread
Published
2026-09-18
Title
Bread < 2.9.13 - Missing Authorization to Unauthenticated Information Exposure
Slug
bread-butter
Published
2024-11-08
Title
Bread & Butter < 7.5.880 - Contributor+ Stored XSS
Slug
bread-butter
Published
2025-12-04
Title
Bread & Butter < 8.0.1398 - Arbitrary File Upload via CSRF
Slug
bread-butter
Published
2026-04-21
Title
Bread & Butter: Content Gating for Verified Leads < 8.7.0.139 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
breadcrumb
Published
2023-01-11
Title
Breadcrumb < 1.5.33 - Contributor+ Stored XSS via Shortcode
Slug
breadcrumb-navxt
Published
2018-09-28
Title
Breadcrumb NavXT < 6.2.0 - Username Disclosure via REST API
Slug
breadcrumb-navxt
Published
2026-02-18
Title
Breadcrumb NavXT < 7.5.1 - Sensitive Information Exposure
Slug
breadcrumb-navxt
Published
2026-09-02
Title
Breadcrumb NavXT < 7.5.2 - Unauthenticated Stored XSS
Slug
breadcrumb-simple
Published
2023-08-30
Title
breadcrumb simple <= 1.3 - Admin+ Stored XSS
Slug
breadcrumbs-by-menu
Published
2019-06-08
Title
Breadcrumbs by menu < 1.0.3 - Multiple Issues
Slug
breadcrumbs-shortcode
Published
2022-08-01
Title
Multiple Plugins from Puvox.software - Reflected Cross-Site Scripting
Slug
breakdance
Published
2024-05-03
Title
Breakdance < 1.7.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom postmeta
Slug
breakdance
Published
2024-05-08
Title
Breakdance < 1.7.2 - Authenticated (Contributor+) Remote Code Execution
Slug
breakdance
Published
2024-07-31
Title
Breakdance < 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting