Skip to content
Noroxi

BestWebSoft records

75 published records for vendor bestwebsoft.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
26.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 19
  3. 20
  4. 21
  5. 22
  6. 23
  7. 24
  8. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

75 records
  • CVE-2015-9325
    40Plan

    The visitors-online plugin before 0.4 for WordPress has SQL injection.

    CriticalCVSS 9.8No exploitEPSS 1%

    bestwebsoft · visitors onlineAug 16, 2019

  • CVE-2015-9335
    40Plan

    The limit-attempts plugin before 1.1.1 for WordPress has SQL injection during IP address handling.

    CriticalCVSS 9.8No exploitEPSS 1%

    bestwebsoft · limit attemptsAug 22, 2019

  • CVE-2022-3393
    39Monitor

    Post to CSV by BestWebSoft <= 1.4.0 - Author+ CSV Injection

    CriticalCVSS 9.8No exploitEPSS 1%

    bestwebsoft · post to csvOct 25, 2022

  • CVE-2023-36508
    39Monitor

    WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    bestwebsoft · contact form to dbOct 31, 2023

  • CVE-2020-8658
    38Monitor

    The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF.

    HighCVSS 8.8No exploitEPSS 9%

    bestwebsoft · htaccessFeb 5, 2020

  • CVE-2023-0765
    35Monitor

    Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · galleryApr 17, 2023

  • CVE-2023-29096
    35Monitor

    WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · contact form to dbDec 20, 2023

  • CVE-2023-36527
    35Monitor

    WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · post to csvNov 7, 2023

  • CVE-2024-35678
    35Monitor

    WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · contact form to dbJun 8, 2024

  • CVE-2012-10015
    35Monitor

    BestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · twitterMay 30, 2023

  • CVE-2023-0820
    35Monitor

    User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · user roleApr 3, 2023

  • CVE-2012-10010
    35Monitor

    BestWebSoft Contact Form contact_form.php cntctfrm_settings_page cross-site request forgery

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · contact formApr 9, 2023

  • CVE-2012-10017
    35Monitor

    BestWebSoft Portfolio Plugin cross-site request forgery

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · portfolioDec 26, 2023

  • CVE-2012-10012
    35Monitor

    BestWebSoft Facebook Like Button facebook-button-plugin.php fcbk_bttn_plgn_settings_page cross-site request forgery

    HighCVSS 8.8No exploitEPSS 0%

    bestwebsoft · facebook buttonApr 9, 2023

  • CVE-2014-125102
    30Monitor

    Bestwebsoft Relevant Plugin Thumbnail information disclosure

    HighCVSS 7.5No exploitEPSS 0%

    bestwebsoft · relevantMay 29, 2023

  • CVE-2023-6250
    30Monitor

    BestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read

    HighCVSS 7.5No exploitEPSS 0%

    bestwebsoft · like \& shareDec 26, 2023

  • CVE-2024-13908
    28Monitor

    SMTP by BestWebSoft <= 1.1.9 - Authenticated (Administrator+) Arbitrary File Upload

    HighCVSS 7.2No exploitEPSS 0%

    bestwebsoft · smtpMar 8, 2025

  • CVE-2023-45771
    28Monitor

    WordPress Contact Form With Captcha plugin <= 1.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    bestwebsoft · captchaMar 26, 2024

  • CVE-2021-25121
    26Monitor

    Rating by BestWebSoft < 1.6 - Rating Denial of Service

    MediumCVSS 6.5No exploitEPSS 1%

    bestwebsoft · ratingJun 20, 2022

  • CVE-2021-24761
    26Monitor

    Error Log Viewer < 1.1.2 - Arbitrary Text File Deletion via CSRF

    MediumCVSS 6.5No exploitEPSS 0%

    bestwebsoft · error log viewerFeb 1, 2022

  • CVE-2023-6821
    26Monitor

    Error Log Viewer < 1.1.3 - Directory Listing to Sensitive Data Exposure

    MediumCVSS 6.5No exploitEPSS 0%

    bestwebsoft · error log viewerMar 18, 2024

  • CVE-2017-18528
    25Monitor

    The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.

    MediumCVSS 6.1Proof of conceptEPSS 1%

    bestwebsoft · pdf \& printAug 20, 2019

  • CVE-2017-18527
    25Monitor

    The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.

    MediumCVSS 6.1Proof of conceptEPSS 1%

    bestwebsoft · paginationAug 20, 2019

  • CVE-2017-18516
    25Monitor

    The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.

    MediumCVSS 6.1Proof of conceptEPSS 1%

    bestwebsoft · linkedinAug 21, 2019

  • CVE-2017-18502
    24Monitor

    The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.

    MediumCVSS 6.1Proof of conceptEPSS 1%

    bestwebsoft · subscriberAug 12, 2019