BestWebSoft vulnerabilities
33 published CVEs name BestWebSoft among the affected products.
- 33Published CVEs33 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical7 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-39772
WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerability
bestwebsoft · Captcha by BestWebSoft
Medium5.3 - CVE-2026-2497
Gallery by BestWebSoft <= 4.7.9 - Authenticated (Editor+) SQL Injection via Gallery Image Order Array Keys
bestwebsoft · Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress
High7.2 - CVE-2026-66456
WordPress Profile Extra Fields by BestWebSoft plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
bestwebsoft · Profile Extra Fields by BestWebSoft
Medium6.5 - CVE-2026-57642
WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability
bestwebsoft · Gallery
High8.5 - CVE-2026-24598
WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerability
bestwebsoft · Multilanguage by BestWebSoft
Medium4.3 - CVE-2025-63056
WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability
bestwebsoft · Contact Form by BestWebSoft
Medium4.3 - CVE-2025-9950
Error Log Viewer by BestWebSoft <= 1.1.6 - Authenticated (Administrator+) Arbitrary File Read
bestwebsoft · Error Log Viewer by BestWebSoft
Medium4.9 - CVE-2024-13906
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.7.3 - Authenticated (Administrator+) PHP Object Injection
bestwebsoft · Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress
High7.2 - CVE-2025-24628
WordPress reCaptcha by BestWebSoft Plugin <= 1.78 - Captcha Bypass vulnerability
bestwebsoft · Google Captcha
Medium5.3 - CVE-2024-35678
WordPress Contact Form to DB by BestWebSoft plugin <= 1.7.2 - SQL Injection vulnerability
BestWebSoft · Contact Form to DB by BestWebSoft
High8.5