WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
baw-post-views-count
Published
2023-01-25
Title
Post Views Count <= 3.0.2 - Contributor+ Stored XSS in Shortcode
Slug
bb-bootstrap-cards
Published
2024-03-21
Title
Cards for Beaver Builder < 1.1.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via bootstrapcard link
Slug
bb-bootstrap-cards
Published
2024-06-07
Title
Cards for Beaver Builder < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Cards Widget
Slug
bb-bootstrap-cards
Published
2024-06-28
Title
Cards for Beaver Builder < 1.1.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
bb-plugin
Published
2025-06-19
Title
Beaver Builder Plugin (Starter Version) < 2.9.1.1 - Admin+ Arbitrary File Upload
Slug
bb-plugin
Published
2025-10-22
Title
Beaver Builder Plugin (Starter Version) < 2.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play'
Slug
bb-ultimate-addon
Published
2019-12-12
Title
Ultimate Addons for Beaver Builder <= 1.24.0 - Authentication Bypass
Slug
bb-ultimate-addon
Published
2023-12-26
Title
Ultimate Addons for Beaver Builder < 1.35.15 - Contributor+ Privilege Escalation
Slug
bb-ultimate-addon
Published
2023-12-26
Title
Ultimate Addons for Beaver Builder < 1.35.14 - Contributor+ Arbitrary File Download
Slug
bbcode-deluxe
Published
2025-04-24
Title
BBCode Deluxe <= 2020.08.01.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bbp-api
Published
2025-06-05
Title
bbPress API <= 1.0.14 - Missing Authorization
Slug
bbp-core
Published
2024-11-01
Title
BBP Core – Expand bbPress powered forums with useful features < 1.2.6 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
bbp-members-only
Published
2019-12-26
Title
bbPress Members Only < 1.3.1 - CSRF on Optional Settings page
Slug
bbp-move-topics
Published
2018-03-11
Title
Bbp Move Topics < 1.1.6 - Code Injection & CSRF
Slug
bbp-move-topics
Published
2025-07-16
Title
bbPress Move Topics <= 1.1.6 - Reflected Cross-Site Scripting
Slug
bbp-style-pack
Published
2023-05-30
Title
bbp style pack < 5.5.6 - Reflected XSS
Slug
bbp-style-pack
Published
2023-10-16
Title
bbp style pack < 5.6.8 - Contributor+ Stored XSS
Slug
bbp-toolkit
Published
2023-05-31
Title
bbPress Toolkit <= 1.0.12 - Reflected XSS
Slug
bbp-toolkit
Published
2023-05-31
Title
bbPress Toolkit <= 1.0.12 - Cross-Site Request Forgery
Slug
bbp-topic-count
Published
2025-09-26
Title
bbp topic count <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bbp-voting
Published
2023-01-27
Title
bbPress Voting < 2.1.11.1 - Admin+ Stored XSS
Slug
bbpowerpack
Published
2024-07-24
Title
PowerPack for Beaver Builder < 2.33.1 - Contributor+ Privilege Escalation
Slug
bbpowerpack
Published
2024-08-16
Title
PowerPack for Beaver Builder < 2.37.4 - Reflected Cross-Site Scripting
Slug
bbpress
Published
2014-08-01
Title
bbPress - Multiple Script Malformed Input Path Disclosure
Slug
bbpress
Published
2014-08-01
Title
bbPress - forum.php page Parameter SQL Injection