Vulnerabilities in bestweblayout
9 resultsCVE-2024-13908HIGHSMTP by BestWebSoft <= 1.1.9 - Authenticated (Administrator+) Arbitrary File UploadEPSS 0.8%CVE-2025-39527HIGHWordPress Rating by BestWebSoft plugin <= 1.7 - PHP Object Injection VulnerabilityEPSS 0.5%CVE-2026-13359HIGHContact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown ParameterEPSS 0.4%CVE-2025-31099HIGHWordPress Slider by BestWebSoft plugin <= 1.1.0 - SQL Injection VulnerabilityEPSS 0.3%CVE-2026-3618MEDIUMColumns by BestWebSoft <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'columns' Shortcode 'id' AttributeEPSS 0.3%CVE-2025-13383MEDIUMJob Board by BestWebSoft <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via $_GET Array StorageEPSS 0.3%CVE-2024-51786MEDIUMWordPress Realty by BestWebSoft plugin <= 1.1.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-39745HIGHWordPress Contact Form to DB by BestWebSoft plugin <= 1.7.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-58245MEDIUMWordPress Portfolio Plugin <= 2.58 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%