Bestwebsoft

32 CVEs across 111 Bestwebsoft products. Browse Bestwebsoft vulnerabilities, severities, and proof-of-concept exploits.

Bestwebsoft products with known CVEs

ProductCVEs
Contact Form11
Contact Form To Db5
Error Log Viewer5
Gallery4
Visitors Online4
Captcha3
Contact Form Plugin3
Facebook Button3
Htaccess3
Pagination3
Pdf \& Print3
Portfolio3
Post To Csv3
Quotes And Tips3
Smtp3
User Role3
Car Rental2
Contact Form2
Contact Form By Bestwebsoft – Advanced Wp Contact Form Builder For Wordpress2
Contact Form Multi2
Contact Form To Db By Bestwebsoft – Messages Database Plugin For Wordpress2
Custom Admin Page2
Custom Search2
Facebook Like Button2
Google Analytics2
Google Maps2
Job Board2
Limit Attempts2
Linkedin2
Pinterest2
Portfolio Plugin2
Profile Extra Fields By Bestwebsoft2
Promobar2
Rating2
Realty2
Relevant2
Sender2
Social Buttons Pack2
Subscriber2
Testimonials2
Timesheet2
Twitter2
Twitter Button2
Twitter Plugin2
Updater2
Zendesk Help Center2
Captcha By Bestwebsoft1
Car Rental1
Car Rental By Bestwebsoft1
Contact Form By Bestwebsoft1
Bestwebsoft CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66456Medium6.52026-08-13Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.
CVE-2026-57642High8.52026-06-26Contributor SQL Injection in Gallery <= 4.7.8 versions.
CVE-2026-24598Medium4.32026-01-23Missing Authorization vulnerability in bestwebsoft Multilanguage by BestWebSoft multilanguage allows Exploiting Incorrectly Configured Access Control Security…
CVE-2025-63056Medium4.32025-12-09Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Secu…
CVE-2025-9950Medium4.92025-10-11The Error Log Viewer by BestWebSoft plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.6 via the rrrlgvwr_get_…
CVE-2024-13908High7.22025-03-08The SMTP by BestWebSoft plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_options' function in all…
CVE-2024-13906High7.22025-03-07The Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up…
CVE-2025-24628Medium5.32025-01-27Authentication Bypass by Spoofing vulnerability in bestwebsoft Google Captcha google-captcha allows Identity Spoofing.This issue affects Google Captcha: from n…
CVE-2024-3112Medium4.82024-07-12The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to…
CVE-2024-35678High8.52024-06-08Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft.This issue…
CVE-2024-31295Medium5.32024-05-17Guessable CAPTCHA vulnerability in BestWebSoft Captcha by BestWebSoft allows Functionality Bypass.This issue affects Captcha by BestWebSoft: from n/a through 5…
CVE-2024-2200Medium6.12024-04-09The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_subject’ parameter in all versio…
CVE-2024-2198Medium6.12024-04-09The Contact Form by BestWebSoft plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘cntctfrm_contact_address’ parameter in all versio…
CVE-2024-30439High7.12024-03-29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BestWebSoft Limit Attempts by BestWebSoft allows Reflecte…
CVE-2023-45771High7.12024-03-26Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Contact Form With Captcha allows Reflected XSS.This issue…
CVE-2023-6821Medium6.52024-03-18The Error Log Viewer by BestWebSoft WordPress plugin before 1.1.3 is affected by a Directory Listing issue, allowing users to read and download PHP logs withou…
CVE-2023-6250High7.52023-12-26The BestWebSoft's Like & Share WordPress plugin before 2.74 discloses the content of password protected posts to unauthenticated users via a meta tag
CVE-2015-10127Low3.52023-12-26A vulnerability was found in PlusCaptcha Plugin up to 2.0.6 on WordPress and classified as problematic. Affected by this issue is some unknown functionality. T…
CVE-2014-125109Low3.52023-12-26A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27. It has been declared as problematic. This vulnerability affects the function bws_add_menu…
CVE-2012-10017Medium4.32023-12-26A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The man…
CVE-2023-29096High8.52023-12-20Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages…
CVE-2023-36527Medium4.72023-11-07Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft…
CVE-2023-36508High7.62023-10-31Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages…
CVE-2023-4469Medium5.32023-10-06The Profile Extra Fields by BestWebSoft plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the prflxtrflds_…
CVE-2023-28778Medium5.92023-06-22Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BestWebSoft Pagination plugin <= 1.2.2 versions.
CVE-2014-125103Low2.42023-05-31A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the fu…
CVE-2012-10015Medium4.32023-05-31A vulnerability was found in BestWebSoft Twitter Plugin up to 2.14 on WordPress. It has been classified as problematic. Affected is the function twttr_settings…
CVE-2014-125102Medium4.32023-05-29A vulnerability classified as problematic was found in Bestwebsoft Relevant Plugin up to 1.0.7 on WordPress. Affected by this vulnerability is an unknown funct…
CVE-2014-125100Low3.52023-05-02A vulnerability classified as problematic was found in BestWebSoft Job Board Plugin 1.0.0 on WordPress. This vulnerability affects unknown code. The manipulati…
CVE-2023-0765High8.82023-04-17The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not properly escape values used in SQL queries, leading to an Blind SQL Injection vulnerability…
CVE-2023-0764Medium5.42023-04-17The Gallery by BestWebSoft WordPress plugin before 4.7.0 does not perform proper sanitization of gallery information, leading to a Stored Cross-Site Scription…
CVE-2022-44734Medium4.82023-04-16Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in BestWebSoft Car Rental by BestWebSoft plugin <= 1.1.2 versions.
CVE-2014-125097Low3.52023-04-10A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttn_settings_page…
CVE-2012-10012Medium4.32023-04-10A vulnerability has been found in BestWebSoft Facebook Like Button up to 2.13 and classified as problematic. Affected by this vulnerability is the function fcb…
CVE-2014-125095Low3.52023-04-09A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function bws_add_m…
CVE-2012-10010Medium4.32023-04-09A vulnerability was found in BestWebSoft Contact Form 3.21. It has been classified as problematic. This affects the function cntctfrm_settings_page of the file…
CVE-2013-10022Low3.52023-04-05A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this issue is the functi…
CVE-2023-0820High8.82023-04-03The User Role by BestWebSoft WordPress plugin before 1.6.7 does not protect against CSRF in requests to update role capabilities, leading to arbitrary privileg…
CVE-2022-3393Critical9.82022-10-25The Post to CSV by BestWebSoft WordPress plugin through 1.4.0 does not properly escape fields when exporting data as CSV, leading to a CSV injection
CVE-2021-25121Medium6.52022-06-20The Rating by BestWebSoft WordPress plugin before 1.6 does not validate the submitted rating, allowing submission of long integer, causing a Denial of Service…
CVE-2017-20055Low3.52022-06-16A vulnerability classified as problematic has been found in BestWebSoft Contact Form Plugin 4.0.0. This affects an unknown part. The manipulation leads to basi…
CVE-2021-24966Medium4.92022-03-14The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files…
CVE-2021-24761Medium6.52022-02-01The Error Log Viewer WordPress plugin before 1.1.2 does not perform nonce check when deleting a log file and does not have path traversal prevention, which cou…
CVE-2021-24350Medium6.12021-06-14The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The plugin would display the user'…
CVE-2020-8658High8.82020-02-06The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF. The flag htccss_nonce_name…
CVE-2015-9385Medium6.12019-09-20The quotes-and-tips plugin before 1.20 for WordPress has XSS.
CVE-2015-9384Medium6.12019-09-20The relevant plugin before 1.0.8 for WordPress has XSS.
CVE-2017-18590Medium6.12019-08-27The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues.
CVE-2015-9335Critical9.82019-08-22The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling.
CVE-2013-7481Medium6.12019-08-22The contact-form-plugin plugin before 3.3.5 for WordPress has XSS.
CVE-2018-20970Medium6.12019-08-21The pdf-print plugin before 2.0.3 for WordPress has multiple XSS issues.
CVE-2017-18562Medium6.12019-08-21The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues.
CVE-2017-18516Medium6.12019-08-21The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.
CVE-2017-18564Medium6.12019-08-21The sender plugin before 1.2.1 for WordPress has multiple XSS issues.
CVE-2017-18565Medium6.12019-08-21The updater plugin before 1.35 for WordPress has multiple XSS issues.
CVE-2017-18558Medium6.12019-08-21The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.
CVE-2017-18557Medium6.12019-08-21The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.
CVE-2017-18556Medium6.12019-08-21The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.
CVE-2017-18537Medium6.12019-08-21The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.
CVE-2017-18566Medium6.12019-08-20The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.
CVE-2017-18532Medium6.12019-08-20The realty plugin before 1.1.0 for WordPress has multiple XSS issues.
CVE-2017-18530Medium6.12019-08-20The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.
CVE-2017-18529Medium6.12019-08-20The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.
CVE-2017-18528Medium6.12019-08-20The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.
CVE-2017-18527Medium6.12019-08-20The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.
CVE-2017-18518Medium6.12019-08-20The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
CVE-2017-18517Medium6.12019-08-20The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.
CVE-2017-18542Medium6.12019-08-16The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.
CVE-2015-9325Critical9.82019-08-16The visitors-online plugin before 0.4 for WordPress has SQL injection.
CVE-2017-18496Medium6.12019-08-13The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.
CVE-2017-18494Medium6.12019-08-13The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.
CVE-2017-18493Medium6.12019-08-13The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.
CVE-2017-18492Medium6.12019-08-13The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.
CVE-2017-18491Medium6.12019-08-13The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.
CVE-2017-18490Medium6.12019-08-13The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.
CVE-2016-10869Medium6.12019-08-13The contact-form-plugin plugin before 4.0.2 for WordPress has XSS.
CVE-2015-9295Medium6.12019-08-13The contact-form-plugin plugin before 3.96 for WordPress has XSS.
CVE-2013-7475Medium6.12019-08-13The contact-form-plugin plugin before 3.52 for WordPress has XSS.
CVE-2017-18505Medium6.12019-08-12The twitter-plugin plugin before 2.55 for WordPress has XSS.
CVE-2017-18502Medium6.12019-08-12The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.
CVE-2017-18501Medium6.12019-08-12The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.
CVE-2017-18500Medium6.12019-08-12The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.
CVE-2017-2171Medium6.12017-05-22Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact For…
CVE-2015-08902015-03-03The BestWebSoft Google Captcha (aka reCAPTCHA) plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain a…
CVE-2014-92832015-03-03The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access v…