Bestwebsoft vulnerabilities

Products

• Contact Form 11
• Contact Form To Db 5
• Error Log Viewer 5
• Error Log Viewer By Bestwebsoft 4
• Gallery 4
• Visitors Online 4
• Captcha 3
• Contact Form Plugin 3
• Contact Form To Db By Bestwebsoft – Messages Database Plugin For Wordpress 3
• Facebook Button 3
• Htaccess 3
• Pagination 3
• Pdf \& Print 3
• Portfolio 3
• Post To Csv 3
• Quotes And Tips 3
• Smtp 3
• User Role 3
• Captcha By Bestwebsoft 2
• Car Rental 2
• Contact Form 2
• Contact Form By Bestwebsoft – Advanced Wp Contact Form Builder For Wordpress 2
• Contact Form Multi 2
• Contact Form To Db By Bestwebsoft 2
• Custom Admin Page 2
• Custom Search 2
• Facebook Like Button 2
• Gallery By Bestwebsoft – Customizable Image And Photo Galleries For Wordpress 2
• Google Analytics 2
• Google Maps 2
• Job Board 2
• Limit Attempts 2
• Linkedin 2
• Pinterest 2
• Portfolio Plugin 2
• Profile Extra Fields By Bestwebsoft 2
• Promobar 2
• Rating 2
• Rating By Bestwebsoft 2
• Realty 2

Show 12 moreShow less

• Relevant 2
• Sender 2
• Social Buttons Pack 2
• Social Login 2
• Subscriber 2
• Testimonials 2
• Timesheet 2
• Twitter 2
• Twitter Button 2
• Twitter Plugin 2
• Updater 2
• Zendesk Help Center 2

Newest

• bestwebsoft captcha by bestwebsoft WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerability CVE-2026-39772 5.3 MediumOctober 6, 2026
• bestweblayout contact form to db by bestwebsoft WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-39745 7.1 HighOctober 6, 2026
• bestweblayout contact form to db by bestwebsoft – messages database plugin for wordpress Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter CVE-2026-13359 7.2 HighSeptember 9, 2026
• bestwebsoft gallery by bestwebsoft – customizable image and photo galleries for wordpress Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys CVE-2026-2497 7.2 HighAugust 16, 2026
• bestwebsoft profile extra fields by bestwebsoft WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-66456 6.5 MediumAugust 13, 2026
• bestwebsoft gallery WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability CVE-2026-57642 8.5 HighJune 26, 2026
• bestwebsoft multilanguage by bestwebsoft WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerability CVE-2026-24598 4.3 MediumJanuary 23, 2026
• bestwebsoft contact form by bestwebsoft WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability CVE-2025-63056 4.3 MediumDecember 9, 2025
• bestwebsoft error log viewer by bestwebsoft Error Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read CVE-2025-9950 4.9 MediumOctober 11, 2025
• bestweblayout rating by bestwebsoft WordPress Rating by BestWebSoft plugin <= 1.7 - PHP Object Injection Vulnerability CVE-2025-39527 8.8 HighApril 17, 2025
• bestweblayout slider by bestwebsoft WordPress Slider by BestWebSoft plugin <= 1.1.0 - SQL Injection Vulnerability CVE-2025-31099 7.6 HighMarch 28, 2025
• bestweblayout smtp by bestwebsoft, bestwebsoft smtp +1 more SMTP by BestWebSoft <= 1.1.9 - Authenticated (Administrator+) Arbitrary File Upload CVE-2024-13908 7.2 HighMarch 8, 2025
• bestwebsoft gallery by bestwebsoft – customizable image and photo galleries for wordpress Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injection CVE-2024-13906 7.2 HighMarch 7, 2025
• bestwebsoft google captcha WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerability CVE-2025-24628 5.3 MediumJanuary 27, 2025
• bestweblayout realty by bestwebsoft WordPress Realty by BestWebSoft plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-51786 6.5 MediumNovember 9, 2024
• bestwebsoft quotes and tips, unknown quotes and tips by bestwebsoft +1 more Quotes and Tips < 1.45 - Admin+ Arbitrary File Upload CVE-2024-3112 4.8 MediumJuly 12, 2024
• bestwebsoft contact form to db by bestwebsoft, contact form to db +1 more WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability CVE-2024-35678 8.5 HighJune 8, 2024
• bestwebsoft captcha by bestwebsoft WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerability CVE-2024-31295 5.3 MediumMay 17, 2024
• bestwebsoft social login, heateor social login wordpress +1 more Heateor Social Login WordPress prior to 1.1.32 contains a cross-site scripting vulnerability. If... CVE-2024-32674 5.4 MediumMay 8, 2024
• bestwebsoft contact form by bestwebsoft – advanced wp contact form builder for wordpress Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_address CVE-2024-2198 6.1 MediumApril 9, 2024
• bestwebsoft contact form, contact form by bestwebsoft – advanced wp contact form builder for wordpress +1 more Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject CVE-2024-2200 6.1 MediumApril 9, 2024
• bestwebsoft limit attempts by bestwebsoft WordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-30439 7.1 HighMarch 29, 2024
• bestwebsoft captcha, contact form with captcha form with captcha +1 more WordPress Contact Form With Captcha plugin <= 1.6.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2023-45771 7.1 HighMarch 26, 2024
• bestwebsoft error log viewer by bestwebsoft, error log viewer +1 more Error Log Viewer < 1.1.3 - Directory Listing to Sensitive Data Exposure CVE-2023-6821 6.5 MediumMarch 18, 2024
• unknown bestwebsoft's like & share, bestwebsoft like \& share +1 more BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read CVE-2023-6250 7.5 HighDecember 26, 2023
• bestwebsoft pluscaptcha PlusCaptcha Plugin cross site scripting CVE-2015-10127 3.5 LowDecember 26, 2023
• bestwebsoft portfolio, portfolio plugin +1 more BestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scripting CVE-2014-125109 3.5 LowDecember 26, 2023
• bestwebsoft portfolio, portfolio plugin +1 more BestWebSoft Portfolio Plugin cross-site request forgery CVE-2012-10017 4.3 MediumDecember 26, 2023
• bestwebsoft contact form to db by bestwebsoft – messages database plugin for wordpress, contact form to db +1 more WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection CVE-2023-29096 8.5 HighDecember 20, 2023
• bestwebsoft post to csv by bestwebsoft, post to csv +1 more WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection CVE-2023-36527 4.7 MediumNovember 7, 2023
• bestwebsoft contact form to db by bestwebsoft – messages database plugin for wordpress, contact form to db +1 more WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection CVE-2023-36508 7.6 HighOctober 31, 2023
• bestwebsoft profile extra fields by bestwebsoft, profile extra fields +1 more Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure CVE-2023-4469 5.3 MediumOctober 6, 2023
• bestwebsoft pagination WordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-28778 5.9 MediumJune 22, 2023
• bestwebsoft twitter, twitter plugin +1 more BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scripting CVE-2014-125103 2.4 LowMay 31, 2023
• bestwebsoft twitter, twitter plugin +1 more BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery CVE-2012-10015 4.3 MediumMay 30, 2023
• bestwebsoft relevant, relevant plugin +1 more Bestwebsoft Relevant Plugin Thumbnail information disclosure CVE-2014-125102 4.3 MediumMay 29, 2023
• bestwebsoft job board plugin, job board +1 more BestWebSoft Job Board Plugin cross site scripting CVE-2014-125100 3.5 LowMay 2, 2023
• bestwebsoft gallery, unknown gallery by bestwebsoft +1 more Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection CVE-2023-0765 8.8 HighApril 17, 2023
• bestwebsoft gallery, unknown gallery by bestwebsoft +1 more Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting CVE-2023-0764 5.4 MediumApril 17, 2023
• bestwebsoft car rental by bestwebsoft, car rental +1 more WordPress Car Rental by BestWebSoft Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS) CVE-2022-44734 4.8 MediumApril 16, 2023
• bestwebsoft facebook like button, facebook button +1 more BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scripting CVE-2014-125097 3.5 LowApril 10, 2023
• bestwebsoft facebook like button, facebook button +1 more BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgery CVE-2012-10012 4.3 MediumApril 9, 2023
• bestwebsoft contact form plugin, contact form +1 more BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scripting CVE-2014-125095 3.5 LowApril 9, 2023
• bestwebsoft contact form BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgery CVE-2012-10010 4.3 MediumApril 9, 2023
• bestwebsoft contact form plugin, contact form +1 more BestWebSoft Contact Form Plugin contact_form.php cntctfrm_check_form cross site scripting CVE-2013-10022 3.5 LowApril 5, 2023
• bestwebsoft user role, unknown user role by bestwebsoft +1 more User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF CVE-2023-0820 8.8 HighApril 3, 2023
• bestwebsoft post to csv, unknown post to csv by bestwebsoft +1 more Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection CVE-2022-3393 9.8 CriticalOctober 25, 2022
• bestwebsoft rating, rating by bestwebsoft +1 more Rating by BestWebSoft < 1.6 - Rating Denial of Service CVE-2021-25121 6.5 MediumJune 20, 2022
• bestwebsoft contact form plugin, contact form +1 more BestWebSoft Contact Form Plugin Stored cross site scriting CVE-2017-20055 3.5 LowJune 16, 2022
• bestwebsoft error log viewer, error log viewer by bestwebsoft +1 more Error Log Viewer Plugin <= 1.1.1 - Admin+ Arbitrary File Clearing CVE-2021-24966 Public exploit 4.9 MediumMarch 14, 2022
• Show olderLoading…