Support Us — Your donation helps us keep running

Goal: 1000 CNY,Raised: 1000 CNY

100.0%

WPBean — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting WPBean. AI-powered Chinese analysis, POCs, and references for each vulnerability.

CVE IDTitleCVSSSeverityPaused
CVE-2025-57967 WordPress WPB Quick View for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability — WPB Quick View for WooCommerceCWE-79 6.5 Medium2025-09-22
CVE-2025-57982 WordPress Advance Portfolio Grid plugin <= 1.07.6 - Cross Site Scripting (XSS) vulnerability — Advance Portfolio GridCWE-79 5.9 Medium2025-09-22
CVE-2025-58858 WordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability — WPB Image WidgetCWE-79 6.5 Medium2025-09-05
CVE-2025-58793 WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability — WPB Elementor AddonsCWE-79 6.5 Medium2025-09-05
CVE-2025-53281 WordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability — WPB Category Slider for WooCommerceCWE-98 7.5 High2025-06-27
CVE-2025-30802 WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability — Our Team MembersCWE-497 4.3 Medium2025-04-01
CVE-2024-13664 WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting — WP Post List TableCWE-79 6.4 Medium2025-01-30
CVE-2024-11034 Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form — Request a Quote for WooCommerce – Get a Quote ButtonCWE-94 7.3 High2024-11-23
CVE-2024-11038 WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form — WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button ClickCWE-94 7.3 High2024-11-19
CVE-2024-34791 WordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability — WPB Elementor AddonsCWE-79 6.5 Medium2024-06-03
CVE-2024-3063 WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting — WPB Addons for Elementor – News Ticker, Timeline, Team & More WidgetsCWE-79 6.4 Medium2024-05-30
CVE-2024-4896 WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter — WPB Addons for Elementor – News Ticker, Timeline, Team & More WidgetsCWE-79 6.4 Medium2024-05-22

This page lists every published CVE security advisory associated with WPBean. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.