Bannersky
9 CVEs across 6 Bannersky products. Browse Bannersky vulnerabilities, severities, and proof-of-concept exploits.
Bannersky products with known CVEs
Bannersky CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-65528 | Medium | 6.5 | 2026-07-23 | Contributor Cross Site Scripting (XSS) in BSK PDF Manager <= 3.8 versions. |
CVE-2026-39686 | Medium | 5.3 | 2026-04-08 | Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in bannersky BSK PDF Manager bsk-pdf-manager allows Retrieve Embedded… |
CVE-2025-4970 | Medium | 5.5 | 2025-12-12 | The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.7.1 due to i… |
CVE-2025-24545 | High | 7.1 | 2025-02-03 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bannersky BSK Forms Validation bsk-gravity-forms-custom-v… |
CVE-2025-22347 | High | 8.2 | 2025-01-07 | Cross-Site Request Forgery (CSRF) vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist allows Blind SQL Injection.This issue affects BSK F… |
CVE-2024-47624 | High | 7.1 | 2024-10-05 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bannersky BSK Forms Blacklist bsk-gravityforms-blacklist… |
CVE-2024-43233 | High | 7.1 | 2024-08-12 | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BannerSky BSK Forms Blacklist allows Reflected XSS… |
CVE-2023-5980 | Medium | 4.8 | 2023-12-26 | The BSK Forms Blacklist WordPress plugin before 3.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
CVE-2023-30872 | High | 7.6 | 2023-12-20 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BannerSky BSK Forms Blacklist.This issue affects BSK Form… |
CVE-2023-5141 | Medium | 6.1 | 2023-12-04 | The BSK Contact Form 7 Blacklist WordPress plugin through 1.0.1 does not sanitise and escape the inserted_count parameter before outputting it back in the page… |
CVE-2023-5110 | Medium | 6.4 | 2023-10-25 | The BSK PDF Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'bsk-pdfm-category-dropdown' shortcode in versions up to, and includi… |
CVE-2021-24860 | High | 7.2 | 2021-11-29 | The BSK PDF Manager WordPress plugin before 3.1.2 does not validate and escape the orderby and order parameters before using them in a SQL statement, leading t… |
CVE-2014-4944 | | | 2014-07-14 | Multiple SQL injection vulnerabilities in inc/bsk-pdf-dashboard.php in the BSK PDF Manager plugin 1.3.2 for WordPress allow remote authenticated users to execu… |