WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bwl-advanced-faq-manager-lite
Published
2026-03-25
Title
BWL Advanced FAQ Manager Lite < 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sbox_id' Shortcode Attribute
Slug
bwl-kb-manager
Published
2025-12-22
Title
BWL Knowledge Base Manager <= 1.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bwl-pro-voting-manager
Published
2025-12-22
Title
BWL Pro Voting Manager <= 1.4.9 - Authenticated (Contributor+) SQL Injection
Slug
bwl-pro-voting-manager
Published
2025-12-22
Title
BWL Pro Voting Manager <= 1.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bwp-google-xml-sitemaps
Published
2022-02-16
Title
Better WordPress Google XML Sitemaps <= 1.4.1 - Unauthenticated Stored Cross-Site Scripting
Slug
bwp-recaptcha
Published
2018-11-07
Title
Better WordPress reCAPTCHA <= 2.0.3 - Unauthenticated Cross-Site Scripting (XSS)
Slug
bws-featured-posts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-google-analytics
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-google-maps
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-latest-posts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-linkedin
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-pinterest
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-popular-posts
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-smtp
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-smtp
Published
2025-03-07
Title
SMTP by BestWebSoft < 1.2.0 - Authenticated (Administrator+) Arbitrary File Upload
Slug
bws-testimonials
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
bws-testimonials
Published
2026-10-06
Title
Testimonials by BestWebSoft 1.0.5 - 1.0.8 - Unauthenticated SQLi via 'offset' Parameter
Slug
bxslider-integration
Published
2025-08-21
Title
bxSlider integration for WordPress <= 1.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
bxslider-wp
Published
2022-07-27
Title
BxSlider WP <= 2.0.0 - Contributor+ Stored Cross-Site Scripting
Slug
bybrick-accordion
Published
2025-03-31
Title
byBrick Accordion <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
byconsole-woo-order-delivery-time
Published
2023-10-17
Title
WooODT Lite < 2.4.8 - Reflected XSS
Slug
byconsole-woo-order-delivery-time
Published
2023-10-31
Title
WooODT Lite < 2.4.7 - Missing Authorization to Arbitrary Options Update
Slug
byconsole-woo-order-delivery-time
Published
2025-02-17
Title
WooODT Lite – Delivery & pickup date time location for WooCommerce < 2.5.2 - Unauthenticated Full Path Dsiclosure
Slug
byconsole-woo-order-delivery-time
Published
2026-02-11
Title
WooODT Lite < 2.5.6 - Unauthenticated Payment Bypass
Slug
byrev-wp-picshield-hotlink-defence
Published
2017-01-04
Title
ByREV WP-PICShield - Cross-Site Request Forgery (CSRF)