WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
baslider
Published
2022-05-26
Title
Image Slider by NextCode <= 1.1.2 - Multiple CSRF
Slug
baslider
Published
2022-05-26
Title
Image Slider by NextCode <= 1.1.2 - Author+ Stored Cross-Site Scripting
Slug
baslider
Published
2022-05-26
Title
Image Slider by NextCode <= 1.1.2 - Arbitrary Slide Deletion via CSRF
Slug
basticom-framework
Published
2024-11-04
Title
Basticom Framework < 1.5.1 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Slug
basticom-framework
Published
2025-12-21
Title
Basticom Framework < 1.5.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
batch-cat
Published
2021-10-05
Title
Batch Cat <= 0.3 - Subscriber+ Arbitrary Categories Add/Set/Delete to Posts
Slug
batchmove
Published
2020-01-19
Title
Batch-Move Posts <= 1.5 - Broken Authentication leading to Unauthenticated Stored XSS
Slug
bauernregeln
Published
2025-01-16
Title
Bauernregeln <= 1.0.1 - Reflected Cross-Site Scripting
Slug
baw-login-logout-menu
Published
2023-01-25
Title
Login Logout Menu <= 1.3.3 - Contributor+ Stored XSS in Shortcode
Slug
baw-post-views-count
Published
2023-01-25
Title
Post Views Count <= 3.0.2 - Contributor+ Stored XSS in Shortcode
Slug
bayarcash-wc
Published
2026-01-13
Title
Bayarcash WooCommerce < 4.3.14 - Missing Authorization
Slug
bb-bootstrap-cards
Published
2024-03-21
Title
Cards for Beaver Builder < 1.1.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via bootstrapcard link
Slug
bb-bootstrap-cards
Published
2024-06-07
Title
Cards for Beaver Builder < 1.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Cards Widget
Slug
bb-bootstrap-cards
Published
2024-06-28
Title
Cards for Beaver Builder < 1.1.5 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
bb-plugin
Published
2025-06-19
Title
Beaver Builder Plugin (Starter Version) < 2.9.1.1 - Admin+ Arbitrary File Upload
Slug
bb-plugin
Published
2025-10-22
Title
Beaver Builder Plugin (Starter Version) < 2.9.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'auto_play'
Slug
bb-ultimate-addon
Published
2019-12-12
Title
Ultimate Addons for Beaver Builder <= 1.24.0 - Authentication Bypass
Slug
bb-ultimate-addon
Published
2023-12-26
Title
Ultimate Addons for Beaver Builder < 1.35.15 - Contributor+ Privilege Escalation
Slug
bb-ultimate-addon
Published
2023-12-26
Title
Ultimate Addons for Beaver Builder < 1.35.14 - Contributor+ Arbitrary File Download
Slug
bbcode-deluxe
Published
2025-04-24
Title
BBCode Deluxe <= 2020.08.01.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bbp-api
Published
2025-06-05
Title
bbPress API <= 1.0.14 - Missing Authorization
Slug
bbp-core
Published
2024-11-01
Title
BBP Core – Expand bbPress powered forums with useful features < 1.2.6 - Reflected Cross-Site Scripting via add_query_arg Parameter
Slug
bbp-core
Published
2025-12-24
Title
BBP Core < 2.0.0 - Missing Authorization
Slug
bbp-members-only
Published
2019-12-26
Title
bbPress Members Only < 1.3.1 - CSRF on Optional Settings page
Slug
bbp-move-topics
Published
2018-03-11
Title
Bbp Move Topics < 1.1.6 - Code Injection & CSRF