Log in Start free

BestWebSoft

Products

ProductCVEsExploitedLatest
Captcha by BestWebSoft2–Oct 6, 2026
Contact Form by BestWebSoft – Advanced WP Contact Form Builder for WordPress2–Apr 9, 2024
Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress2–Dec 20, 2023
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress2–Aug 16, 2026
Profile Extra Fields by BestWebSoft2–Aug 13, 2026
Pagination1–Jun 22, 2023
Error Log Viewer by BestWebSoft1–Oct 11, 2025
Gallery1–Jun 26, 2026
Post to CSV by BestWebSoft1–Nov 7, 2023
Google Captcha1–Jan 27, 2025
Limit Attempts by BestWebSoft1–Mar 29, 2024
Car Rental by BestWebSoft1–Apr 16, 2023
Contact Form by BestWebSoft1–Dec 9, 2025
Multilanguage by BestWebSoft1–Jan 23, 2026
Contact Form to DB by BestWebSoft1–Jun 8, 2024

Exploited and recent CVEs

  • CVE-2026-39772 Medium 5.3 WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerability 0.3%
  • CVE-2026-2497 High 7.2 Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys 0.6%
  • CVE-2026-66456 Medium 6.5 WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57642 High 8.5 WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability 0.4%
  • CVE-2026-24598 Medium 4.3 WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerability 0.3%
  • CVE-2025-63056 Medium 4.3 WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability 0.3%
  • CVE-2025-9950 Medium 4.9 Error Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read 0.7%
  • CVE-2024-13906 High 7.2 Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injection 0.7%
  • CVE-2025-24628 Medium 5.3 WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerability 0.4%
  • CVE-2024-35678 High 8.5 WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability 0.4%
  • CVE-2024-31295 Medium 5.3 WordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerability 0.4%
  • CVE-2024-2198 Medium 6.1 Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_address 0.5%
  • CVE-2024-2200 Medium 6.1 Contact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject 0.5%
  • CVE-2024-30439 High 7.1 WordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-29096 High 8.5 WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection 0.7%
  • CVE-2023-36527 Medium 4.7 WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection 0.6%
  • CVE-2023-36508 High 7.6 WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection 0.7%
  • CVE-2023-4469 Medium 5.3 Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure 0.6%
  • CVE-2023-28778 Medium 5.9 WordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-44734 Medium 4.8 WordPress Car Rental by BestWebSoft Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS) 0.4%