WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
wp-baidu-submit
Published
2023-02-15
Title
WP BaiDu Submit <= 1.2.1 - Admin+ Stored XSS
Slug
wp-ban
Published
2014-09-17
Title
WP-Ban < 1.64 BlackList Bypass
Slug
wp-ban
Published
2022-12-06
Title
WP-Ban < 1.69.1 - Admin+ Stored XSS
Slug
wp-ban-user
Published
2024-12-12
Title
WP-Ban-User <= 1.0 - Cross-Site Request Forgery to Cross-Site Scripting
Slug
wp-bannerize
Published
2014-08-01
Title
WP Bannerize <= 2.8.6 - SQL Injection
Slug
wp-bannerize
Published
2014-08-01
Title
WP Bannerize <= 2.8.7 - SQL Injection
Slug
wp-bannerize
Published
2021-10-05
Title
WP Bannerize 2.0.0 - 4.0.2 - Authenticated SQL Injection
Slug
wp-bannerize-pro
Published
2023-09-01
Title
WP Bannerize Pro < 1.7.0 - Reflected XSS
Slug
wp-bannerize-pro
Published
2024-08-12
Title
WP Bannerize Pro < 1.9.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
wp-bannerize-pro
Published
2025-09-03
Title
WP Bannerize Pro < 1.11.0 - Authenticated (Editor+) Server-Side Request Forgery
Slug
wp-bannerize-pro
Published
2026-01-25
Title
Bannerize Pro < 1.11.1 - Missing Authorization
Slug
wp-banners-lite
Published
2014-08-01
Title
WP-Banners-Lite 1.4.0 - Cross-Site Scripting (XSS)
Slug
wp-base-booking-of-appointments-services-and-events
Published
2024-12-16
Title
WP BASE Booking of Appointments, Services and Events < 4.9.2 - Reflected Cross-Site Scripting via status Parameter
Slug
wp-base-booking-of-appointments-services-and-events
Published
2024-12-20
Title
WP BASE Booking of Appointments, Services and Events < 5.0.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via app_export_db
Slug
wp-base-booking-of-appointments-services-and-events
Published
2025-01-31
Title
WP BASE Booking < 5.1.0 - Unauthenticated Stored Cross-Site Scripting
Slug
wp-base-booking-of-appointments-services-and-events
Published
2025-02-05
Title
WP BASE Booking of Appointments, Services and Events < 5.0.0 - Reflected XSS
Slug
wp-base-booking-of-appointments-services-and-events
Published
2026-04-08
Title
WP BASE Booking of Appointments, Services and Events < 6.0.0 - Unauthenticated Privilege Escalation
Slug
wp-basic-elements
Published
2023-03-14
Title
WP Basic Elements < 5.3.0 - Settings Update via CSRF
Slug
wp-basics
Published
2024-11-04
Title
WP-Basics <= 2.0 - Reflected Cross-Site Scripting
Slug
wp-bbcode
Published
2025-11-10
Title
WP BBCode <= 1.8.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
wp-best-quiz
Published
2022-10-28
Title
WP Best Quiz <= 1.0 - Author+ Stored XSS
Slug
wp-better-emails
Published
2023-01-13
Title
WP Better Emails <= 0.4 - Admin+ Stored XSS
Slug
wp-better-permalinks
Published
2019-06-27
Title
WP Better Permalinks <= 3.0.4 - CSRF allowing Option Update
Slug
wp-bibtex
Published
2025-01-20
Title
WP-BibTeX < 3.0.2 - Cross-Site Request Forgery to Stored and Reflected Cross-Site Scripting
Slug
wp-bibtex
Published
2025-02-17
Title
WP-BibTeX <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting