Wpbeginner - vulnerabilities (CVEs)

5 CVEs in 5 products, 0 in the last 30 days, newest from 2025-06-26.

Products

• Charitable - 1 CVEs
• Floating Social Bar - 1 CVEs
• Smash Balloon Social Post Feed - 1 CVEs
• Sugar Calendar - 1 CVEs
• Transients Manager - 1 CVEs

Newest CVEs of Wpbeginner

• CVE-2025-5275 - CVSS 4.4 (medium), 2025-06-26: The Charitable – Donation Plugin for WordPress – Fundraising with Recurring Donations & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
• CVE-2025-4577 - CVSS 6.4 (medium), 2025-06-10: The Smash Balloon Social Post Feed – Simple Social Feeds for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-color…
• CVE-2024-10878 - CVSS 6.1 (medium), 2024-11-26: The Sugar Calendar – Simple Event Management plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg &…
• CVE-2024-10045 - CVSS 4.3 (medium), 2024-10-23: The Transients Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or…
• CVE-2015-5528 - CVSS 4.3 (medium), 2015-07-16: Cross-site scripting (XSS) vulnerability in the save_order function in class-floating-social-bar.php in the Floating Social Bar plugin before 1.1.6 for…