WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
bbpress
Published
2016-05-02
Title
bbPress <= 2.5.8 - Stored Cross-Site Scripting (XSS)
Slug
bbpress
Published
2016-07-13
Title
bbPress <= 2.5.9 - Display Name & Avatar Potential Cross-Site Scripting (XSS)
Slug
bbpress
Published
2017-11-13
Title
bbPress <= 2.5.12 - Unauthenticated SQL Injection
Slug
bbpress
Published
2020-05-28
Title
bbPress < 2.6.5 - Unauthenticated Privilege Escalation when New User Registration enabled
Slug
bbpress
Published
2020-05-28
Title
bbPress 2.6-2.6.5 - Authenticated Privilege Escalation via the Super Moderator feature
Slug
bbpress
Published
2020-05-28
Title
bbPress < 2.6.5 - Authenticated Stored Cross-Site Scripting via the forums list table
Slug
bbpress
Published
2019-11-12
Title
bbPress < 2.6.0 - Subscriber+ Stored Cross-Site Scripting via Post Slug
Slug
bbpress
Published
2025-03-04
Title
bbPress < 2.6.12 - Cross-Site Request Forgery to Limited Privilege Escalation
Slug
bbpress-login-register-links-on-forum-topic-pages
Published
2019-12-25
Title
bbPress Login Register Links On Forum Topic Pages < 2.8.5 - CSRF to Stored XSS
Slug
bbpress-notify-nospam
Published
2024-07-04
Title
bbPress Notify < 2.18.4 - Reflected Cross-Site Scripting
Slug
bbpress-notify-nospam
Published
2025-07-19
Title
bbPress Notify < 2.20 - Reflected Cross-Site Scripting
Slug
bbpress2-shortcode-whitelist
Published
2025-04-17
Title
bbPress2 shortcode whitelist <= 2.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
bbresolutions
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
bbresolutions
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
bbs-e-franchise
Published
2016-11-12
Title
BBS e-Franchise 1.1.1 - Unauthenticated SQL Injection
Slug
bbs-e-popup
Published
2023-05-30
Title
BBS e-Popup <= 2.4.5 - Reflected XSS
Slug
bbspoiler
Published
2023-04-18
Title
BBSpoiler < 2.02 - Contributor+ Stored XSS
Slug
bc-menu-cart-woo
Published
2023-12-07
Title
BC Menu Bar Cart Icon For WooCommerce By Binary Carpenter <= 1.49.3 - Cross-Site Request Forgery
Slug
bc-woo-custom-thank-you-pages
Published
2024-04-15
Title
Custom Thank You Page Customize For WooCommerce by Binary Carpenter < 1.4.14 - Missing Authorization
Slug
bck-tu-dong-xac-nhan-thanh-toan-chuyen-khoan-ngan-hang
Published
2024-09-23
Title
Thanh Toán Quét Mã QR Code Tự Động – MoMo, ViettelPay, VNPay và 40 ngân hàng Việt Nam <= 2.0.1 - Unauthenticated Stored Cross-Site Scripting
Slug
bcm-duplicate-menu
Published
2025-09-05
Title
BCM Duplicate Menu <= 1.1.2 - Cross-Site Request Forgery
Slug
bcorp-shortcodes
Published
2023-12-05
Title
BCorp Shortcodes <= 0.23 - Unauthenticated PHP Object Injection
Slug
bcs-bertline-book-importer
Published
2021-06-14
Title
BCS BatchLine Book Importer < 1.5.8 - Unauthenticated Product Import
Slug
bdthemes-element-pack
Published
2024-04-25
Title
Element Pack Pro < 7.19.3 - Contributor+ Arbitrary File Read and PHAR Deserialization
Slug
bdthemes-element-pack
Published
2024-07-31
Title
Element Pack - Addon for Elementor Page Builder WordPress Plugin < 7.9.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL