breadbutter

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

breadbutter records in CISA KEV

No breadbutter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Bread & Butter 1 record HIGH

Records

3 records

TI-2025-11175 CVE-2025-12189 · GHSA-r8gc-wh4j-rhrc

Cross-site request forgery in breadbutter Bread & Butter: AI-Powered Lead Intelligence

HIGH 71

The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.11.1374.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0035 Published 2025-12-05 No fix listed CWE-352

TI-2024-34706 CVE-2024-51802 · GHSA-f76r-8x77-pwm4

WordPress Bread & Butter plugin <= 7.4.857 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bread & Butter Bread & Butter bread-butter allows DOM-Based XSS.This issue affects Bread & Butter: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00389 Published 2024-11-19 No fix listed CWE-79

TI-2026-03724 CVE-2026-4279 · GHSA-g8vq-gpv7-9mmq

Cross-site scripting in breadbutter Bread & Butter: AI-Powered Lead Intelligence

LOW 28

The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-button' shortcode in all versions up to, and including, 8.2.0.25.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00235 Published 2026-04-22 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0