Skip to content
OpenAdvisories

Vendor

breadbutter

2 known vulnerabilities.

Products

Bread & Butter: AI-Powered Lead Intelligence 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-4279

    Bread & Butter: Content Gating for Verified Leads <= 8.2.0.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

    The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-button' shortcode in all versions up to, and including, 8.2.0.25. This is due to insufficient input sanitization and output escaping on the '…

    breadbutter Bread & Butter: AI-Powered Lead Intelligence Web / CMS
  • Medium 4.3
    CVE-2025-12189 Public exploit

    Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents <= 7.11.1374 - Cross-Site Request Forgery to Arbitrary File Upload

    The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.11.1374. This is due to missing or incorrect nonce va…

    breadbutter Bread & Butter: AI-Powered Lead Intelligence Web / CMS