WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bulletproof-security
Published
2021-09-16
Title
BulletProof Security < 5.2 - Sensitive Information Disclosure
Slug
bulletproof-security
Published
2022-02-22
Title
BulletProof Security < 5.8 - Admin+ Stored Cross-Site Scripting (XSS)
Slug
bulletproof-security
Published
2022-04-19
Title
BulletProof Security < 6.1 - Admin+ Stored Cross-Site Scripting
Slug
bulletproof-security
Published
2026-01-06
Title
BulletProof Security < 7.0 - Unauthenticated Sensitive Information Exposure
Slug
bulma-shortcodes
Published
2025-11-20
Title
Bulma Shortcodes <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bunnycdn
Published
2024-04-08
Title
bunny.net – WordPress CDN Plugin < 2.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
bunnycdn
Published
2025-05-19
Title
bunny.net < 2.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bunnys-print-css
Published
2025-06-09
Title
Bunny’s Print CSS <= 0.95 - Cross-Site Request Forgery to Settings Update
Slug
buooy-sticky-header
Published
2024-11-04
Title
Buooy Sticky Header <= 0.5.2 - Reflected Cross-Site Scripting
Slug
burst-pro
Published
2023-12-06
Title
Burst Statistics (Free < 1.5.0, Pro < 1.5.1) - Unauthenticated SQL Injection
Slug
burst-statistics
Published
2023-12-06
Title
Burst Statistics (Free < 1.5.0, Pro < 1.5.1) - Unauthenticated SQL Injection
Slug
burst-statistics
Published
2024-01-16
Title
Burst Statistics Really Simple Plugins < 1.5.4 - Editor+ SQL Injection
Slug
burst-statistics
Published
2024-03-12
Title
Burst Statistics < 1.5.7 - Contributor+ Stored Cross-Site Scripting via burst_total_pageviews_count
Slug
burst-statistics
Published
2025-06-27
Title
Burst Statistics < 2.0.8 - Cross-Site Request Forgery
Slug
bus-booking-manager
Published
2024-09-23
Title
Multipurpose Ticket Booking Manager < 4.2.3 - Administrator+ Stored XSS
Slug
bus-ticket-booking-with-seat-reservation
Published
2023-08-01
Title
Bus Ticket Booking with Seat Reservation < 5.2.4 - Reflected XSS
Slug
bus-ticket-booking-with-seat-reservation
Published
2023-11-13
Title
Bus Ticket Booking with Seat Reservation < 5.2.6 - Unauthenticated Cross-Site Scripting
Slug
bus-ticket-booking-with-seat-reservation
Published
2024-08-28
Title
Bus Ticket Booking with Seat Reservation < 5.3.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
bus-ticket-booking-with-seat-reservation
Published
2025-01-06
Title
Bus Ticket Booking with Seat Reservation < 5.4.4 - Cross-Site Request Forgery
Slug
bus-ticket-booking-with-seat-reservation
Published
2026-03-05
Title
Bus Ticket Booking with Seat Reservation <= 5.6.2 - Unauthenticated PHP Object Injection
Slug
business
Published
2024-10-31
Title
Business <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
business-card-block
Published
2025-02-23
Title
Business Card Block < 1.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Arbitrary Card Deletion via CSRF
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Card Edit via CSRF
Slug
business-card-by-esterox-100
Published
2024-05-06
Title
Business Card <= 1.0.0 - Category Deletion via CSRF