WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bux-woocommerce
Published
2025-05-18
Title
Bux Woocommerce <= 1.2.3 - Missing Authorization
Slug
buy-now-pay-later-addi
Published
2026-03-10
Title
Addi – Cuotas que se adaptan a ti <= 2.0.4 - Missing Authorization
Slug
buy-now-plus
Published
2026-01-27
Title
Buy Now Plus < 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
buy-one-click-woocommerce
Published
2024-11-12
Title
Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Settings Export
Slug
buy-one-click-woocommerce
Published
2024-11-12
Title
Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Order Deletion
Slug
buy-one-click-woocommerce
Published
2024-11-12
Title
Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Settings Import
Slug
buybox-widget
Published
2025-02-18
Title
Widget BUY.BOX <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
buying-buddy-idx-crm
Published
2024-11-18
Title
Buying Buddy IDX CRM < 2.0.0 - PHP Object Injection via CSRF
Slug
buying-buddy-idx-crm
Published
2025-06-19
Title
Buying Buddy IDX CRM < 2.3.1 - Contributor+ Stored XSS
Slug
buymeacoffee
Published
2023-06-19
Title
Buy Me a Coffee < 3.7 - Admin+ Stored XSS
Slug
buymeacoffee
Published
2023-07-10
Title
Buy Me a Coffee – Button and Widget Plugin < 3.8 - Cross-Site Request Forgery
Slug
buymeacoffee
Published
2023-07-10
Title
Buy Me a Coffee – Button and Widget Plugin < 3.8 - Subscriber+ Unauthorized Data Modification
Slug
buymeacoffee
Published
2023-07-13
Title
Buy Me a Coffee < 3.7 - Subscriber+ Stored Cross-Site Scripting
Slug
buzzsprout-podcasting
Published
2023-10-29
Title
Buzzsprout Podcasting < 1.8.5 - Contributor+ Stored Cross-Site Scripting
Slug
bvd-easy-gallery-manager
Published
2025-01-03
Title
BVD Easy Gallery Manager <= 1.0.6 - Reflected Cross-Site Scripting
Slug
bverse-convert
Published
2024-10-14
Title
bVerse Convert <= 1.3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bwd-elementor-addons
Published
2025-01-06
Title
BWD Elementor Addons < 4.3.19 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Slug
bwd-elementor-addons
Published
2025-04-04
Title
BWD Elementor Addons <= 4.4.2 - Contributor+ Stored XSS
Slug
bwl-advanced-faq-manager
Published
2024-04-12
Title
BWL Advanced FAQ Manager < 2.0.4 - Authenticated (Administrator+) SQL Injection
Slug
bwl-advanced-faq-manager
Published
2025-03-25
Title
BWL Advanced FAQ Manager < 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update
Slug
bwl-kb-manager
Published
2025-12-22
Title
BWL Knowledge Base Manager <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bwl-pro-voting-manager
Published
2025-12-22
Title
BWL Pro Voting Manager <= 1.4.9 - Authenticated (Contributor+) SQL Injection
Slug
bwl-pro-voting-manager
Published
2025-12-22
Title
BWL Pro Voting Manager <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bwp-google-xml-sitemaps
Published
2022-02-16
Title
Better WordPress Google XML Sitemaps <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting
Slug
bwp-recaptcha
Published
2018-11-07
Title
Better WordPress reCAPTCHA <= 2.0.3 - Unauthenticated Cross-Site Scripting (XSS)