Bestweblayout vulnerabilities
We track 4 vulnerabilities in Bestweblayout products across 4 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 9, 2026.
Latest Bestweblayout vulnerabilities
- 7.2 High severity
Contact Form to DB by BestWebSoft – Messages…: Improper Neutralization of Input During Web Page Generation
The Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter in all versions up to, and including, 1.7.5 due to insufficient input sanit
- 8.8 High severity
Rating by BestWebSoft: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in bestweblayout Rating by BestWebSoft rating-bws allows Object Injection.This issue affects Rating by BestWebSoft: from n/a through <= 1.7.
- 7.6 High severity
Slider by BestWebSoft: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bestweblayout Slider by BestWebSoft slider-bws allows SQL Injection.This issue affects Slider by BestWebSoft: from n/a through <= 1.1.0.
- 7.2 High severity
SMTP by BestWebSoft: Unrestricted Upload of File with Dangerous Type
The SMTP by BestWebSoft plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'save_options' function in all versions up to, and including, 1.1.9. This makes it possible for authenticated attackers, with Admini