Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

WPBean vulnerabilities

13 published CVEs name WPBean among the affected products.

Published CVEs
13
Last 12 months
1
Critical
0
Known exploited
0

Critical 0High 3Medium 10Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20245
  2. 20257
  3. 20261

Newest CVEs

  • CVE-2026-4811

    WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 - Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Field

    wpbean · WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons

    Medium4.9
  • CVE-2025-57967

    WordPress WPB Quick View for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

    WPBean · WPB Quick View for WooCommerce

    Medium6.5
  • CVE-2025-57982

    WordPress Advance Portfolio Grid plugin <= 1.07.6 - Cross Site Scripting (XSS) vulnerability

    WPBean · Advance Portfolio Grid

    Medium5.9
  • CVE-2025-58858

    WordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability

    WPBean · WPB Image Widget

    Medium6.5
  • CVE-2025-58793

    WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

    WPBean · WPB Elementor Addons

    Medium6.5
  • CVE-2025-53281

    WordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability

    WPBean · WPB Category Slider for WooCommerce

    High7.5
  • CVE-2025-30802

    WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability

    WPBean · Our Team Members

    Medium4.3
  • CVE-2024-13664

    WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    wpbean · WP Post List Table

    Medium6.4
  • CVE-2024-11034

    Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form

    wpbean · Request a Quote for WooCommerce – Get a Quote Button

    High7.3
  • CVE-2024-11038

    WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form

    wpbean · WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click

    High7.3