CVEs we hold for Bestwebsoft
Records whose assigning authority named Bestwebsoft as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-66456WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityBestWebSoft
CVE-2026-2497Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array KeysBestWebSoft – Customizable Image and Photo Galleries for…
CVE-2026-24598WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerabilityBestWebSoft
CVE-2025-9950Error Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File ReadBestWebSoft
CVE-2025-63056WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerabilityBestWebSoft
CVE-2025-24628WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerabilitybestwebsoft Google Captcha
CVE-2024-35678WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerabilityBestWebSoft
CVE-2024-31295WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerabilityBestWebSoft
CVE-2024-30439WordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerabilityBestWebSoft
CVE-2024-2200Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subjectBestWebSoft – Advanced WP Contact Form Builder for WordPress
CVE-2024-2198Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_addressBestWebSoft – Advanced WP Contact Form Builder for WordPress
CVE-2024-13906Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+)…BestWebSoft – Customizable Image and Photo Galleries for…
CVE-2023-6250BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post ReadUnknown BestWebSoft's Like & Share
CVE-2023-4469Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information ExposureBestWebSoft
CVE-2023-36527WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV InjectionBestWebSoft
CVE-2023-36508WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL InjectionBestWebSoft – Messages Database Plugin For WordPress
CVE-2023-29096WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL InjectionBestWebSoft – Messages Database Plugin For WordPress
CVE-2023-28778WordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)BestWebSoft Pagination
CVE-2022-44734WordPress Car Rental by BestWebSoft Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)BestWebSoft
CVE-2017-20055BestWebSoft Contact Form Plugin Stored cross site scritingBestWebSoft Contact Form Plugin
CVE-2014-125109BestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scriptingBestWebSoft Portfolio Plugin
CVE-2014-125103BestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scriptingBestWebSoft Twitter Plugin
CVE-2014-125102Bestwebsoft Relevant Plugin Thumbnail information disclosureBestwebsoft Relevant Plugin
CVE-2014-125097BestWebSoft Facebook Like Button facebook-button-plugin.php fcbkbttn_settings_page cross site scriptingBestWebSoft Facebook Like Button
CVE-2014-125095BestWebSoft Contact Form Plugin bws_menu.php bws_add_menu_render cross site scriptingBestWebSoft Contact Form Plugin
CVE-2013-10022BestWebSoft Contact Form Plugin contact_form.php cntctfrm_check_form cross site scriptingBestWebSoft Contact Form Plugin
CVE-2012-10015BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgeryBestWebSoft Twitter Plugin
CVE-2012-10012BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgeryBestWebSoft Facebook Like Button
CVE-2012-10010BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgeryBestWebSoft Contact Form
33 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.