Bestwebsoft vulnerabilities
33 CVEs and advisories name Bestwebsoft as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-39772WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerability
- CVE-2026-2497Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys
- CVE-2026-66456WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-57642WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability
- CVE-2026-24598WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerability
- CVE-2025-63056WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability
- CVE-2025-9950Error Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read
- CVE-2024-13906Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injection
- CVE-2025-24628WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerability
- CVE-2024-35678WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability
- CVE-2024-31295WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerability
- CVE-2024-2198Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_address
- CVE-2024-2200Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject
- CVE-2024-30439WordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2014-125109BestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scripting
- CVE-2012-10017BestWebSoft Portfolio Plugin cross-site request forgery
- CVE-2023-29096WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection
- CVE-2023-36527WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection
- CVE-2023-36508WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection
- CVE-2023-4469Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure
- CVE-2023-28778WordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2014-125103BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scripting
- CVE-2012-10015BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery
- CVE-2014-125102Bestwebsoft Relevant Plugin Thumbnail information disclosure
- CVE-2014-125100BestWebSoft Job Board Plugin cross site scripting
- CVE-2022-44734WordPress Car Rental by BestWebSoft Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2014-125097BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scripting
- CVE-2012-10012BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgery
- CVE-2014-125095BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scripting
- CVE-2012-10010BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgery