WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2024-09-25
Title
Bulk NoIndex & NoFollow Toolkit < 2.16 - Reflected Cross-Site Scripting
Slug
bulk-noindex-nofollow-toolkit-by-mad-fish
Published
2025-04-01
Title
Bulk NoIndex & NoFollow Toolkit < 2.20 - Reflected Cross-Site Scripting
Slug
bulk-order-update-for-woocommerce
Published
2026-07-07
Title
Bulk Order Update for WooCommerce <= 1.6 - Unauthenticated Arbitrary File Read via 'csv_url' Parameter
Slug
bulk-page-creator
Published
2022-05-09
Title
Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF
Slug
bulk-page-stub-creator
Published
2025-04-17
Title
Bulk Page Stub Creator < 1.2 - Reflected Cross-Site Scripting
Slug
bulk-resize-media
Published
2023-03-16
Title
Bulk Resize Media <= 1.1 - CSRF
Slug
bulk-role-change
Published
2024-10-28
Title
Bulk Change Role <= 1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Slug
bulk-seo-image
Published
2026-06-23
Title
Bulk SEO Image <= 1.1 - Cross-Site Request Forgery to Settings Update
Slug
bulk-term-editor
Published
2025-04-16
Title
Bulk Term Editor <= 1.1.4 - Cross-Site Request Forgery
Slug
bulk-user-editor
Published
2025-04-01
Title
Bulk Fields Editor <= 1.8.0 - Missing Authorization
Slug
bulk-watermark
Published
2025-09-05
Title
Bulk Watermark <= 1.6.10 - Cross-Site Request Forgery
Slug
bulk-woocommerce-category-creator
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulk-woocommerce-category-creator
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bulk-youtube-post-creator
Published
2025-06-18
Title
Bulk YouTube Post Creator <= 1.0 - Reflected Cross-Site Scripting
Slug
bulkpress
Published
2024-11-15
Title
BulkPress <= 0.3.5 - Reflected Cross-Site Scripting
Slug
bulletin-announcements
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bulletin-announcements
Published
2023-05-11
Title
Announcement & Notification Banner – Bulletin < 3.7.1 - Cross-Site Request Forgery
Slug
bulletin-announcements
Published
2023-05-11
Title
Announcement & Notification Banner – Bulletin < 3.7.0 - Subscriber+ Unauthorized Access and Modification
Slug
bulletin-announcements
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bulletin-announcements
Published
2024-03-28
Title
WordPress Announcement & Notification Banner Plugin – Bulletin < 3.9.0 - Authenticated (Administrator+) SQL Injection
Slug
bulletin-announcements
Published
2024-11-20
Title
Bulletin Announcements < 3.12 - Reflected Cross-Site Scripting
Slug
bulletin-announcements
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
bulletproof-security
Published
2014-08-01
Title
BulletProof Security <= .47 - Cross-Site Scripting (XSS)
Slug
bulletproof-security
Published
2014-08-01
Title
BulletProof Security - Security Log Script Insertion
Slug
bulletproof-security
Published
2014-09-30
Title
BulletProof Security < .52.5 - Script Insertion