Vulnerabilities

TI-2026-03724 CVE-2026-4279 · GHSA-g8vq-gpv7-9mmq

Cross-site scripting in breadbutter Bread & Butter: AI-Powered Lead Intelligence

LOW 28

The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-button' shortcode in all versions up to, and including, 8.2.0.25.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00235 Published 2026-04-22 No fix listed CWE-79

TI-2025-11175 CVE-2025-12189 · GHSA-r8gc-wh4j-rhrc

Cross-site request forgery in breadbutter Bread & Butter: AI-Powered Lead Intelligence

HIGH 71

The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.11.1374.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0035 Published 2025-12-05 No fix listed CWE-352

TI-2024-34706 CVE-2024-51802 · GHSA-f76r-8x77-pwm4

WordPress Bread & Butter plugin <= 7.4.857 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bread & Butter Bread & Butter bread-butter allows DOM-Based XSS.This issue affects Bread & Butter: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00389 Published 2024-11-19 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site scripting in breadbutter Bread & Butter: AI-Powered Lead Intelligence

Cross-site request forgery in breadbutter Bread & Butter: AI-Powered Lead Intelligence

WordPress Bread & Butter plugin <= 7.4.857 - Cross Site Scripting (XSS) vulnerability