Skip to content
Wpbeginner vulnerabilities
Newest
-
smub charitable – donation plugin for wordpress – fundraising with recurring donations & more, wpbeginner charitable +1 more
Charitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings
CVE-2025-5275
4.4 Medium
-
smub smash balloon social post feed – simple social feeds for wordpress, wpbeginner smash balloon social post feed +1 more
Smash Balloon Custom Facebook Feed <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-color` Attribute
CVE-2025-4577
6.4 Medium
-
wpbeginner sugar calendar, smub sugar calendar – events calendar, event tickets, and events management platform +1 more
Sugar Calendar (Lite) <= 3.3.0 - Reflected Cross-Site Scripting
CVE-2024-10878
6.1 Medium
-
smub transients manager
Transients Manager <= 2.0.6 - Cross-Site Request Forgery
CVE-2024-10045
4.3 Medium
-
wpbeginner floating social bar
Cross-site scripting (XSS) vulnerability in the save_order function in class-floating-social-bar...
CVE-2015-5528
4.3 Medium