Skip to content
Wpbean vulnerabilities
Newest
-
wpbean wpb floating menu or categories – sticky floating side menu & categories with icons
WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 - Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Field
CVE-2026-4811
4.9 Medium
-
wpbean wpb quick view for woocommerce
WordPress WPB Quick View for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2025-57967
6.5 Medium
-
wpbean advance portfolio grid
WordPress Advance Portfolio Grid plugin <= 1.07.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-57982
5.9 Medium
-
wpbean wpb image widget
WordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability
CVE-2025-58858
6.5 Medium
-
wpbean wpb elementor addons
WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58793
6.5 Medium
-
wpbean wpb category slider for woocommerce
WordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability
CVE-2025-53281
7.5 High
-
wpbean our team members
WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability
CVE-2025-30802
4.3 Medium
-
wpbean wp post list table
WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-13664
6.4 Medium
-
wpbean request a quote, request a quote for woocommerce – get a quote button +1 more
Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form
CVE-2024-11034
7.3 High
-
wpbean wpb popup for contact form 7, wpb popup for contact form 7 – showing contact form 7 popup on button click, wpb advanced faq +2 more
WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form
CVE-2024-11038
7.3 High
-
wpbean wpb elementor addons
WordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-34791
6.5 Medium
-
wpbean wpb elementor addons, wpb addons for elementor – news ticker, timeline, team & more widgets +1 more
WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-3063
6.4 Medium
-
wpbean wpb elementor addons, wpb addons for elementor – news ticker, timeline, team & more widgets +1 more
WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter
CVE-2024-4896
6.4 Medium
-
unknown wpb advanced faq
WPB Advanced FAQ <= 1.0.6 - Contributor+ Stored XSS
CVE-2023-0370
5.4 Medium