WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
base64-encoderdecoder
Published
2024-04-24
Title
Base64 Encoder/Decoder <= 0.9.2 - Settings Reset via CSRF
Slug
basepress
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
basepress
Published
2024-04-25
Title
Knowledge Base documentation & wiki plugin – BasePress < 2.16.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery
Slug
basepress
Published
2024-04-25
Title
Knowledge Base documentation & wiki plugin – BasePress < 2.16.2.1 - Missing Authorization
Slug
basepress
Published
2024-12-03
Title
Knowledge Base documentation & wiki plugin – BasePress Docs < 2.16.3.4 - Missing Authorization to Authenticated (Subscriber+) Database Update
Slug
basepress
Published
2025-12-31
Title
Knowledge Base documentation & wiki plugin – BasePress < 2.17.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
basepress
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Slug
basepress-migration-tools
Published
2024-11-13
Title
BasePress Migration Tools <= 1.0.0 - Authenticated (Subscriber+) Arbitrary File Upload
Slug
basic-contact-form
Published
2017-09-23
Title
Basic Contact Form <= 1.0.3 - Potential Unauthenticated Shell Upload
Slug
basic-google-maps-placemarks
Published
2014-08-01
Title
Basic Google Maps Placemarks 1.10.2 - settings.php Multiple Fields Stored XSS Weakness
Slug
basic-google-maps-placemarks
Published
2026-04-15
Title
Basic Google Maps Placemarks < 1.10.8 - Missing Authorization to Unauthenticated Default Map Coordinate Update
Slug
basic-interactive-world-map
Published
2023-11-08
Title
Basic Interactive World Map < 2.7 - Admin+ Stored XSS
Slug
basic-interactive-world-map
Published
2025-04-16
Title
Basic Interactive World Map <= 2.7 - Cross-Site Request Forgery to Settings Update
Slug
baslider
Published
2022-05-26
Title
Image Slider by NextCode <= 1.1.2 - Multiple CSRF
Slug
baslider
Published
2022-05-26
Title
Image Slider by NextCode <= 1.1.2 - Author+ Stored Cross-Site Scripting
Slug
baslider
Published
2022-05-26
Title
Image Slider by NextCode <= 1.1.2 - Arbitrary Slide Deletion via CSRF
Slug
basticom-framework
Published
2024-11-04
Title
Basticom Framework < 1.5.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
basticom-framework
Published
2025-12-21
Title
Basticom Framework < 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
batch-cat
Published
2021-10-05
Title
Batch Cat <= 0.3 - Subscriber+ Arbitrary Categories Add/Set/Delete to Posts
Slug
batchmove
Published
2020-01-19
Title
Batch-Move Posts <= 1.5 - Broken Authentication leading to Unauthenticated Stored XSS
Slug
bauernregeln
Published
2025-01-16
Title
Bauernregeln <= 1.0.1 - Reflected Cross-Site Scripting
Slug
baw-login-logout-menu
Published
2023-01-25
Title
Login Logout Menu <= 1.3.3 - Contributor+ Stored XSS in Shortcode
Slug
baw-post-views-count
Published
2023-01-25
Title
Post Views Count <= 3.0.2 - Contributor+ Stored XSS in Shortcode
Slug
bayarcash-wc
Published
2026-01-13
Title
Bayarcash WooCommerce < 4.3.14 - Missing Authorization
Slug
bb-bootstrap-cards
Published
2024-03-21
Title
Cards for Beaver Builder < 1.1.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via bootstrapcard link