WP
Vendor
Wpbeginner
5
CVEs
0
On KEV
0
New 30D
Products
CH4.0
Charitable
Wpbeginner
1 CVEs0 on KEV0 new
FS–
Floating Social Bar
Wpbeginner
1 CVEs0 on KEV0 new
SB5.4
Smash Balloon Social Post Feed
Wpbeginner
1 CVEs0 on KEV0 new
SC6.1
Sugar Calendar
Wpbeginner
1 CVEs0 on KEV0 new
TM4.3
Transients Manager
Wpbeginner
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-5275 | CH Charitable Wpbeginner | 4.0 | Jun 26 | Charitable <= 1.8.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via Plugin's Privacy Settings |
| CVE-2025-4577 | SB Smash Balloon Social Post Feed Wpbeginner | 5.4 | Jun 10 | Smash Balloon Custom Facebook Feed <= 4.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via `data-color` Attribute |
| CVE-2024-10878 | SC Sugar Calendar Wpbeginner | 6.1 | Nov 26 | Sugar Calendar (Lite) <= 3.3.0 - Reflected Cross-Site Scripting |
| CVE-2024-10045 | TM Transients Manager Wpbeginner | 4.3 | Oct 23 | Transients Manager <= 2.0.6 - Cross-Site Request Forgery |
| CVE-2015-5528 | FS Floating Social Bar Wpbeginner | – | Jul 16 | Cross-site scripting (XSS) vulnerability in the save_order function in class-floating-social-bar.php in the Floating Social Bar plugin before 1.1.6 for WordPress allows remote… |