Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how bestwebsoft compares to other vendors in security performance

View Risk Score →

Software

bestwebsoft contact form
8
bestwebsoft error log viewer
6
bestwebsoft contact form to db
5
bestwebsoft gallery
5
bestwebsoft contact form wordpress
4
bestwebsoft visitors online
4
bestwebsoft facebook button
3
bestwebsoft job board
3
bestwebsoft pdf & print
3
bestwebsoft portfolio
3
bestwebsoft quotes and tips
3
bestwebsoft smtp
3
bestwebsoft user role
3
bestwebsoft wordpress captcha
3
bestwebsoft contact form by bestwebsoft
2
bestwebsoft contact form multi
2
bestwebsoft custom admin page
2
bestwebsoft custom search
2
bestwebsoft google analytics
2
bestwebsoft google maps
2
bestwebsoft htaccess
2
bestwebsoft limit attempts
2
bestwebsoft linkedin
2
bestwebsoft pagination
2
bestwebsoft pinterest
2
bestwebsoft post to csv
2
bestwebsoft promobar
2
bestwebsoft rating
2
bestwebsoft relevant
2
bestwebsoft sender
2
bestwebsoft social buttons pack
2
bestwebsoft subscriber
2
bestwebsoft testimonials
2
bestwebsoft timesheet
2
bestwebsoft twitter
2
bestwebsoft twitter button
2
bestwebsoft updater
2
bestwebsoft zendesk help center
2
bestwebsoft captcha
1
bestwebsoft captcha wordpress
1
bestwebsoft car rental
1
bestwebsoft car rental wordpress
1
bestwebsoft columns by bestwebsoft (wordpress plugin)
1
bestwebsoft donate
1
bestwebsoft email queue
1
bestwebsoft featured posts
1
bestwebsoft gallery categories
1
bestwebsoft google +1
1
bestwebsoft google captcha
1
bestwebsoft google captcha (recaptcha) by bestwebsoft
1

Bestwebsoft GalleryGallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys

Risk 66
Severity
7.2
First published (updated )
CVE-2026-2497

Bestwebsoft Columns by BestWebSoft (WordPress plugin)Columns by BestWebSoft <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'columns' Shortcode 'id' Attribute

Risk 39
Severity
6.4
First published (updated )
CVE-2026-3618

Bestwebsoft Contact Form by BestWebSoftWordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability

Risk 22
Severity
4.3
First published (updated )
CVE-2025-63056

Bestwebsoft Job BoardJob Board by BestWebSoft <= 1.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting via $_GET Array Storage

Risk 38
Severity
6.1
First published (updated )
CVE-2025-13383

Bestwebsoft Error Log ViewerError Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read

Risk 22
Severity
4.9
EPSS
0.27%
First published (updated )
CVE-2025-9950
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Bestwebsoft Rating by BestWebSoftWordPress Rating by BestWebSoft plugin <= 1.7 - PHP Object Injection Vulnerability

Risk 56
Severity
8.8
EPSS
0.05%
First published (updated )
CVE-2025-39527

Bestwebsoft Slider by BestWebSoftWordPress Slider by BestWebSoft plugin <= 1.1.0 - SQL Injection Vulnerability

Risk 30
Severity
7.6
EPSS
0.04%
First published (updated )
CVE-2025-31099

Bestwebsoft SMTPSMTP by BestWebSoft <= 1.1.9 - Authenticated (Administrator+) Arbitrary File Upload

Risk 66
Severity
7.2
First published (updated )
CVE-2024-13908

Bestwebsoft GalleryGallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injection

Risk 66
Severity
7.2
First published (updated )
CVE-2024-13906

Bestwebsoft Google Captcha (reCAPTCHA) by BestWebSoftWordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerability

Risk 21
Severity
5.3
EPSS
0.04%
First published (updated )
CVE-2025-24628
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Bestwebsoft Quotes And Tips WordpressQuotes and Tips < 1.45 - Admin+ Arbitrary File Upload

Risk 30
Severity
4.9
First published (updated )
CVE-2024-3112

BestWebSoft Contact Form to DBWordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability

Risk 79
Severity
8.8
First published (updated )
CVE-2024-35678

Bestwebsoft CaptchaWordPress Captcha by BestWebSoft plugin <= 5.2.0 - Captcha Bypass vulnerability

Risk 27
Severity
5.3
First published (updated )
CVE-2024-31295

Bestwebsoft Contact Form by BestWebSoftContact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_address

Risk 38
Severity
6.1
First published (updated )
CVE-2024-2198

Bestwebsoft Contact FormContact Form by BestWebSoft <= 4.2.8 - Reflected Cross-Site Scripting via cntctfrm_contact_subject

Risk 38
Severity
6.1
First published (updated )
CVE-2024-2200
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Bestwebsoft Limit AttemptsWordPress Limit Attempts by BestWebSoft plugin <= 1.2.9 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 36
Severity
7.1
EPSS
0.04%
First published (updated )
CVE-2024-30439

WordPress Contact Form With CaptchaWordPress Contact Form With Captcha plugin <= 1.6.8 - Reflected Cross Site Scripting (XSS) vulnerability

Risk 50
Severity
7.1
First published (updated )
CVE-2023-45771

Bestwebsoft Error Log ViewerError Log Viewer < 1.1.3 - Directory Listing to Sensitive Data Exposure

Risk 38
Severity
6.5
First published (updated )
CVE-2023-6821

Bestwebsoft Like \& Share WordpressBestWebSoft's Like & Share < 2.74 - Unauthenticated Password Protected Post Read

Risk 31
Severity
7.5
EPSS
0.12%
First published (updated )
CVE-2023-6250

Bestwebsoft Pluscaptcha WordpressPlusCaptcha Plugin cross site scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2015-10127
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Bestwebsoft Portfolio WordpressBestWebSoft Portfolio Plugin bws_menu.php bws_add_menu_render cross site scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2014-125109

Bestwebsoft Portfolio WordpressBestWebSoft Portfolio Plugin cross-site request forgery

Risk 77
Severity
8.8
First published (updated )
CVE-2012-10017

BestWebSoft Contact Form to DBWordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.0 is vulnerable to SQL Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2023-29096

Bestwebsoft Post To Csv WordpressWordPress Post to CSV by BestWebSoft plugin <= 1.4.0 - CSV Injection

Risk 79
Severity
8.8
First published (updated )
CVE-2023-36527

BestWebSoft Contact Form to DBWordPress Contact Form to DB by BestWebSoft plugin <= 1.7.1 - SQL Injection vulnerability

Risk 86
Severity
9.8
First published (updated )
CVE-2023-36508
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Bestwebsoft Profile Extra Fields WordpressProfile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure

Risk 27
Severity
5.3
First published (updated )
CVE-2023-4469

Bestwebsoft Pagination WordpressWordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)

Risk 40
Severity
5.9
First published (updated )
CVE-2023-28778

Bestwebsoft Twitter WordpressBestWebSoft Twitter Plugin twitter.php twttr_settings_page cross site scripting

Risk 38
Severity
6.1
First published (updated )
CVE-2014-125103

Bestwebsoft Twitter WordpressBestWebSoft Twitter Plugin Settings Page twitter.php twttr_settings_page cross-site request forgery

Risk 77
Severity
8.8
First published (updated )
CVE-2012-10015

Bestwebsoft Relevant WordpressBestwebsoft Relevant Plugin Thumbnail information disclosure

Risk 43
Severity
7.5
First published (updated )
CVE-2014-125102
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203