WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
buttonizer-multifunctional-button
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
buttons-shortcode-and-widget
Published
2024-02-09
Title
Buttons Shortcode and Widget <= 1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Slug
buttons-shortcode-and-widget
Published
2024-02-20
Title
Buttons Shortcode and Widget <= 1.16 - Stored XSS via shortcode
Slug
buttons-x
Published
2023-04-18
Title
Button Builder - Buttons X <= 0.8.6 - Contributor+ Stored XSS
Slug
bux-woocommerce
Published
2025-05-18
Title
Bux Woocommerce <= 1.2.3 - Missing Authorization
Slug
buy-now-pay-later-addi
Published
2026-03-10
Title
Addi – Cuotas que se adaptan a ti < 2.1.0 - Missing Authorization
Slug
buy-now-plus
Published
2026-01-27
Title
Buy Now Plus < 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
buy-one-click-woocommerce
Published
2024-11-12
Title
Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Settings Export
Slug
buy-one-click-woocommerce
Published
2024-11-12
Title
Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Order Deletion
Slug
buy-one-click-woocommerce
Published
2024-11-12
Title
Buy one click WooCommerce <= 2.2.9 - Missing Authorization to Authenticated (Subscriber+) Settings Import
Slug
buybox-widget
Published
2025-02-18
Title
Widget BUY.BOX <= 3.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
buying-buddy-idx-crm
Published
2024-11-18
Title
Buying Buddy IDX CRM < 2.0.0 - PHP Object Injection via CSRF
Slug
buying-buddy-idx-crm
Published
2025-06-19
Title
Buying Buddy IDX CRM < 2.3.1 - Contributor+ Stored XSS
Slug
buymeacoffee
Published
2023-06-19
Title
Buy Me a Coffee < 3.7 - Admin+ Stored XSS
Slug
buymeacoffee
Published
2023-07-10
Title
Buy Me a Coffee – Button and Widget Plugin < 3.8 - Cross-Site Request Forgery
Slug
buymeacoffee
Published
2023-07-10
Title
Buy Me a Coffee – Button and Widget Plugin < 3.8 - Subscriber+ Unauthorized Data Modification
Slug
buymeacoffee
Published
2023-07-13
Title
Buy Me a Coffee < 3.7 - Subscriber+ Stored Cross-Site Scripting
Slug
buzz-comments
Published
2026-04-21
Title
Buzz Comments <= 0.9.4 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Buzz Avatar' Setting
Slug
buzzsprout-podcasting
Published
2023-10-29
Title
Buzzsprout Podcasting < 1.8.5 - Contributor+ Stored Cross-Site Scripting
Slug
bvd-easy-gallery-manager
Published
2025-01-03
Title
BVD Easy Gallery Manager <= 1.0.6 - Reflected Cross-Site Scripting
Slug
bverse-convert
Published
2024-10-14
Title
bVerse Convert <= 1.3.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bwd-elementor-addons
Published
2025-01-06
Title
BWD Elementor Addons < 4.3.19 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
Slug
bwd-elementor-addons
Published
2025-04-04
Title
BWD Elementor Addons <= 4.4.3 - Contributor+ Stored XSS
Slug
bwl-advanced-faq-manager
Published
2024-04-12
Title
BWL Advanced FAQ Manager < 2.0.4 - Authenticated (Administrator+) SQL Injection
Slug
bwl-advanced-faq-manager
Published
2025-03-25
Title
BWL Advanced FAQ Manager < 2.1.5 - Missing Authorization to Authenticated (Subscriber+) Limited Arbitrary Options Update