Skip to content
OpenAdvisories

Vendor

bestweblayout

9 known vulnerabilities.

Products

Job Board by BestWebSoft 1 Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress 1 Rating by BestWebSoft 1 Slider by BestWebSoft 1 Columns by BestWebSoft – Additional Columns Plugin for Posts Pages and Widgets 1 Portfolio 1 Realty by BestWebSoft 1 Contact Form to DB by BestWebSoft 1 SMTP by BestWebSoft 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-3618

    Columns by BestWebSoft <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'columns' Shortcode 'id' Attribute

    The Columns by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' shortcode attribute of the [print_clmns] shortcode in all versions up to and including 1.0.3. This is due to insufficient input sanitization and output e…

    bestweblayout Columns by BestWebSoft – Additional Columns Plugin for Posts Pages and Widgets Web / CMS
  • Medium 6.1
    CVE-2025-13383

    Job Board by BestWebSoft <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via $_GET Array Storage

    The Job Board by BestWebSoft plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.1. This is due to the plugin storing the entire unsanitized `$_GET` superglobal array directly into the database via `upda…

    bestweblayout Job Board by BestWebSoft Web / CMS
  • Medium 5.9
    CVE-2025-58245

    WordPress Portfolio Plugin <= 2.58 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bestweblayout Portfolio portfolio allows DOM-Based XSS.This issue affects Portfolio : from n/a through <= 2.58.

    bestweblayout Portfolio
  • Medium 6.5
    CVE-2024-51786

    WordPress Realty by BestWebSoft plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bestweblayout Realty by BestWebSoft realty allows Stored XSS.This issue affects Realty by BestWebSoft: from n/a through <= 1.1.5.

    bestweblayout Realty by BestWebSoft