Bestwebsoft vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Bestwebsoft products: 4 record(s), with severity, exploitation and fixes.

Contact Form by BestWebSoft 1 Multilanguage by BestWebSoft 1 Gallery 1 Captcha by BestWebSoft 1

Exploited only (KEV) →

CVE-2026-39772 Medium · 5.3 CWE-290 Oct 6, 2026

WordPress Captcha by BestWebSoft plugin <= 5.2.8 - Bypass Vulnerability vulnerability

Unauthenticated Bypass Vulnerability in Captcha by BestWebSoft <= 5.2.8 versions.

CVE-2026-57642 High · 8.5 CWE-89 Jun 26, 2026

WordPress Gallery plugin <= 4.7.8 - SQL Injection vulnerability

Contributor SQL Injection in Gallery <= 4.7.8 versions.

CVE-2026-24598 Medium · 4.3 CWE-862 Jan 23, 2026

WordPress Multilanguage by BestWebSoft plugin <= 1.5.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in bestwebsoft Multilanguage by BestWebSoft multilanguage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Multilanguage by BestWebSoft: from n/a through <= 1.5.2.

CVE-2025-63056 Medium · 4.3 CWE-862 Dec 9, 2025

WordPress Contact Form by BestWebSoft plugin <= 4.3.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in bestwebsoft Contact Form by BestWebSoft contact-form-plugin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contact Form by BestWebSoft: from n/a through <= 4.3.6.