Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

wpbean — Vulnerabilities & Security Advisories 13

Browse all 13 CVE security advisories affecting wpbean. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Wpbean develops WordPress-focused security plugins and tools, primarily aimed at hardening websites against common web threats. Historically, its products have been associated with multiple security vulnerabilities, including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation issues, with 12 CVEs documented to date. These vulnerabilities often stem from insufficient input validation and improper access controls in plugin interfaces. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities suggests ongoing challenges in secure development practices, potentially leaving users exposed to compromise if proper hardening measures aren't implemented.

CVE ID Title CVSS Severity Published
CVE-2026-4811 WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 - Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Field — WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons CWE-79 4.9 Medium 2026-05-21
CVE-2025-57967 WordPress WPB Quick View for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability — WPB Quick View for WooCommerce CWE-79 6.5 Medium 2025-09-22
CVE-2025-57982 WordPress Advance Portfolio Grid plugin <= 1.07.6 - Cross Site Scripting (XSS) vulnerability — Advance Portfolio Grid CWE-79 5.9 Medium 2025-09-22
CVE-2025-58858 WordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability — WPB Image Widget CWE-79 6.5 Medium 2025-09-05
CVE-2025-58793 WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability — WPB Elementor Addons CWE-79 6.5 Medium 2025-09-05
CVE-2025-53281 WordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability — WPB Category Slider for WooCommerce CWE-98 7.5 High 2025-06-27
CVE-2025-30802 WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability — Our Team Members CWE-497 4.3 Medium 2025-04-01
CVE-2024-13664 WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting — WP Post List Table CWE-79 6.4 Medium 2025-01-30
CVE-2024-11034 Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form — Request a Quote for WooCommerce – Get a Quote Button CWE-94 7.3 High 2024-11-23
CVE-2024-11038 WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form — WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click CWE-94 7.3 High 2024-11-19
CVE-2024-34791 WordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability — WPB Elementor Addons CWE-79 6.5 Medium 2024-06-03
CVE-2024-3063 WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting — WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets CWE-79 6.4 Medium 2024-05-30
CVE-2024-4896 WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter — WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets CWE-79 6.4 Medium 2024-05-22

This page lists every published CVE security advisory associated with wpbean. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.