Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Best WP Developer Clear all filters
TI-2026-70133 CVE-2026-3717 · GHSA-qrxh-w7jg-4wg7

Missing authorization in CV Builder lets attackers upload PNG files

Priority LOW 29

The CV Builder – Professional Resume Builder SaaS plugin for WordPress is vulnerable to unauthorized arbitrary file upload due to a missing capability check on the 'wp_save_signature_image' function in all versions up to…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00189 Published 2026-10-10 No fix listed CWE-862
TI-2025-31465 CVE-2025-49417 · GHSA-fq9w-fp93-3f95

WordPress WooCommerce Product Multi-Action plugin <= 1.3 - Deserialization of untrusted data Vulnerability

Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in BestWpDeveloper WooCommerce Product Multi-Action Woo-product-multiaction allows Object Injection.This issue affects WooCommerce Product Multi-Action: from n/a through <=…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00439 Published 2025-07-04 No fix listed CWE-502
TI-2025-23287 CVE-2025-32189 · GHSA-8j77-2348-vgf2

WordPress BWD Elementor Addons plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Best WP Developer BWD Elementor Addons bwd-elementor-addons allows DOM-Based XSS.This issue affects BWD Elementor Addo…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00407 Published 2025-04-04 No fix listed CWE-79
TI-2024-36375 CVE-2024-54287 · GHSA-67g4-5m8x-cjpr

WordPress Advanced Blog Post Block plugin <= 1.0.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Best WP Developer Advanced Blog Post Block advanced-blog-post-block allows Stored XSS.This issue affects Advanced Blog…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2024-12-13 No fix listed CWE-79
TI-2024-34773 CVE-2024-51869 · GHSA-7hr9-vfjf-38m4

WordPress Gutenium Blocks plugin <= 1.1.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Best WP Developer Gutenium Blocks gutenium allows Stored XSS.This issue affects Gutenium Blocks: from n/a through <= 1…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-11-19 No fix listed CWE-79