Skip to content
OpenAdvisories

Vendor

wpbean

13 known vulnerabilities.

Products

WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets 2 WPB Elementor Addons 2 Request a Quote for WooCommerce – Get a Quote Button 1 WPB Category Slider for WooCommerce 1 WPB Image Widget 1 WPB Quick View for WooCommerce 1 WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click 1 WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons 1 Advance Portfolio Grid 1 WP Post List Table 1 Our Team Members 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-4811

    WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 - Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Field

    The WPB Floating Menu & Categories for WordPress – Sticky Side Menu with Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Icon CSS Class' category field in all versions up to, and including, 1.0.8 due to insufficient input sani…

    wpbean WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons Web / CMS
  • Medium 6.5
    CVE-2025-57967

    WordPress WPB Quick View for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean WPB Quick View for WooCommerce woocommerce-lightbox allows Stored XSS.This issue affects WPB Quick View for WooCommerce: from n/a through <= 2.1.8.

    wpbean WPB Quick View for WooCommerce Web / CMS
  • Medium 5.9
    CVE-2025-57982

    WordPress Advance Portfolio Grid plugin <= 1.07.6 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean Advance Portfolio Grid advance-portfolio-grid allows Stored XSS.This issue affects Advance Portfolio Grid: from n/a through <= 1.07.6.

    wpbean Advance Portfolio Grid
  • Medium 6.5
    CVE-2025-58858

    WordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean WPB Image Widget wpb-image-widget allows Stored XSS.This issue affects WPB Image Widget: from n/a through <= 1.1.

    wpbean WPB Image Widget
  • Medium 6.5
    CVE-2025-58793

    WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPBean WPB Elementor Addons wpb-elementor-addons allows Stored XSS.This issue affects WPB Elementor Addons: from n/a through <= 1.7.

    wpbean WPB Elementor Addons
  • Medium 4.3
    CVE-2025-30802

    WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in WPBean Our Team Members our-team-members.This issue affects Our Team Members: from n/a through <= 2.2.

    wpbean Our Team Members
  • Medium 6.4
    CVE-2024-13664

    WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The WP Post List Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wpb_post_list_table' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user supplied a…

    wpbean WP Post List Table Web / CMS
  • Medium 6.5
    CVE-2024-34791

    WordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in wpbean WPB Elementor Addons allows Stored XSS.This issue affects WPB Elementor Addons: from n/a through 1.0.9.

    wpbean WPB Elementor Addons
  • Medium 6.4
    CVE-2024-3063

    WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The WPB Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the output of 'tags' added to widgets in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping on user supplied tag at…

    wpbean WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets Web / CMS
  • Medium 6.4
    CVE-2024-4896

    WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter

    The WPB Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    wpbean WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets Web / CMS