BestWebSoft vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20235
3. 20231
4. 20236
5. 20231
6. 20234
7. 20246
8. 20253
9. 20265

Newest CVEs

• CVE-2026-39772

  WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerability

  bestwebsoft · Captcha by BestWebSoft

  Medium5.3
• CVE-2026-2497

  Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys

  bestwebsoft · Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress

  High7.2
• CVE-2026-66456

  WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

  bestwebsoft · Profile Extra Fields by BestWebSoft

  Medium6.5
• CVE-2026-57642

  WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability

  bestwebsoft · Gallery

  High8.5
• CVE-2026-24598

  WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerability

  bestwebsoft · Multilanguage by BestWebSoft

  Medium4.3
• CVE-2025-63056

  WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability

  bestwebsoft · Contact Form by BestWebSoft

  Medium4.3
• CVE-2025-9950

  Error Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read

  bestwebsoft · Error Log Viewer by BestWebSoft

  Medium4.9
• CVE-2024-13906

  Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injection

  bestwebsoft · Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress

  High7.2
• CVE-2025-24628

  WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerability

  bestwebsoft · Google Captcha

  Medium5.3
• CVE-2024-35678

  WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability

  BestWebSoft · Contact Form to DB by BestWebSoft

  High8.5