Skip to content
Bestweblayout vulnerabilities
Newest
-
bestweblayout contact form to db by bestwebsoft
WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-39745
7.1 High
-
bestweblayout contact form to db by bestwebsoft – messages database plugin for wordpress
Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter
CVE-2026-13359
7.2 High
-
bestweblayout columns by bestwebsoft – additional columns plugin for posts pages and widgets
Columns by BestWebSoft <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'columns' Shortcode 'id' Attribute
CVE-2026-3618
6.4 Medium
-
bestweblayout job board by bestwebsoft
Job Board by BestWebSoft <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via $_GET Array Storage
CVE-2025-13383
6.1 Medium
-
bestweblayout portfolio
WordPress Portfolio Plugin <= 2.58 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58245
5.9 Medium
-
bestweblayout rating by bestwebsoft
WordPress Rating by BestWebSoft plugin <= 1.7 - PHP Object Injection Vulnerability
CVE-2025-39527
8.8 High
-
bestweblayout slider by bestwebsoft
WordPress Slider by BestWebSoft plugin <= 1.1.0 - SQL Injection Vulnerability
CVE-2025-31099
7.6 High
-
bestweblayout smtp by bestwebsoft, bestwebsoft smtp +1 more
SMTP by BestWebSoft <= 1.1.9 - Authenticated (Administrator+) Arbitrary File Upload
CVE-2024-13908
7.2 High
-
bestweblayout realty by bestwebsoft
WordPress Realty by BestWebSoft plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability
CVE-2024-51786
6.5 Medium
-
bestweblayout portfolio, bestwebsoft captcha, car rental +51 more +53 more
Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version...
CVE-2017-2171
6.1 Medium