WPBean
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| WPB Addons for Elementor – News Ticker, Timeline, Team & More Widgets | 2 | – | May 30, 2024 |
| WPB Elementor Addons | 2 | – | Sep 5, 2025 |
| Request a Quote for WooCommerce – Get a Quote Button | 1 | – | Nov 23, 2024 |
| WP Post List Table | 1 | – | Jan 30, 2025 |
| WPB Category Slider for WooCommerce | 1 | – | Jun 27, 2025 |
| WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons | 1 | – | May 21, 2026 |
| WPB Image Widget | 1 | – | Sep 5, 2025 |
| WPB Popup for Contact Form 7 – Showing Contact Form 7 Popup on Button Click | 1 | – | Nov 19, 2024 |
| Advance Portfolio Grid | 1 | – | Sep 22, 2025 |
| WPB Quick View for WooCommerce | 1 | – | Sep 22, 2025 |
| Our Team Members | 1 | – | Apr 1, 2025 |
Exploited and recent CVEs
- CVE-2026-4811 WPB Floating Menu or Categories – Sticky Floating Side Menu & Categories with Icons <= 1.0.8 - Authenticated (Editor+) Stored Cross-Site Scripting via 'Icon CSS Class' Category Field 0.3%
- CVE-2025-57967 WordPress WPB Quick View for WooCommerce plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-57982 WordPress Advance Portfolio Grid plugin <= 1.07.6 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-58858 WordPress WPB Image Widget Plugin <= 1.1 - Cross Site Scripting (XSS) Vulnerability 0.2%
- CVE-2025-58793 WordPress WPB Elementor Addons plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-53281 WordPress WPB Category Slider for WooCommerce plugin <= 1.71 - Local File Inclusion Vulnerability 0.7%
- CVE-2025-30802 WordPress Our Team Members plugin <= 2.2 - Sensitive Data Exposure vulnerability 0.4%
- CVE-2024-13664 WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2024-11034 Request a Quote for WooCommerce and Elementor – Get a Quote Button – Product Enquiry Form Popup – Product Quotation <= 1.4 - Unauthenticated Arbitrary Shortcode Execution via fire_contact_form 0.8%
- CVE-2024-11038 WPB Popup for Contact Form 7 – Showing The Contact Form 7 Popup on Button Click – CF7 Popup <= 1.7.5 - Unauthenticated Arbitrary Shortcode Execution via wpb_pcf_fire_contact_form 0.6%
- CVE-2024-34791 WordPress WPB Elementor Addons plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-3063 WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2024-4896 WPB Elementor Addons <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via url Parameter 0.3%