Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

bfintal vulnerabilities

7 published CVEs name bfintal among the affected products.

Published CVEs
7
Last 12 months
2
Critical
0
Known exploited
0

Critical 0High 0Medium 7Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20244
  2. 20251
  3. 20262

Newest CVEs

  • CVE-2026-9601

    Stackable <= 3.19.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'save' Parameter

    bfintal · Stackable – Page Builder Gutenberg Blocks

    Medium6.4
  • CVE-2025-12709

    Interactions – Create Interactive Experiences in the Block Editor <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    bfintal · Interactions – Create Interactive Experiences in the Block Editor

    Medium6.4
  • CVE-2024-12117

    Stackable – Page Builder Gutenberg Blocks <= 3.13.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

    bfintal · Stackable – Page Builder Gutenberg Blocks

    Medium6.4
  • CVE-2022-4974

    Freemius SDK <= 2.4.2 - Missing Authorization Checks

    dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

    Medium6.3
  • CVE-2024-8760

    Stackable – Page Builder Gutenberg Blocks <= 3.13.6 - Unauthenticated CSS Injection

    bfintal · Stackable – Page Builder Gutenberg Blocks

    Medium5.3
  • CVE-2024-6296

    Stackable – Page Builder Gutenberg Blocks <= 3.13.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting

    bfintal · Stackable – Page Builder Gutenberg Blocks

    Medium6.4
  • CVE-2024-2039

    Stackable – Page Builder Gutenberg Blocks <= 3.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Posts Block

    bfintal · Stackable – Page Builder Gutenberg Blocks

    Medium6.4