Extension WordPress

Vulnérabilités Bread & Butter: AI Lead Intelligence Engine

Cette page rassemble les failles publiées pour Bread & Butter: AI Lead Intelligence Engine, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
3Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Bread & Butter: AI Lead Intelligence Engine

3 fiches

CVE-2026-4279 Moyenne · 6,4
Bread & Butter: AI Lead Intelligence Engine

Bread & Butter: Content Gating for Verified Leads <= 8.6.0.107 – Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes

The Bread & Butter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'breadbutter-customevent-button' shortcode in all versions up to, and including, 8.6.0.107. This is due to insufficient input sanitization and output escaping on the 'event'…

Versions affectées

*-8.6.0.107

Correctif

8.7.0.139

Publication

21/04/2026

CVE-2025-12189 Moyenne · 4,3
Bread & Butter: AI Lead Intelligence Engine

Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents <= 7.11.1374 – Cross-Site Request Forgery to Arbitrary File Upload

The Bread & Butter: Gate content + Capture leads + Collect first-party data + Nurture with Ai agents plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 7.11.1374. This is due…

Versions affectées

*-7.11.1374

Correctif

8.0.1398

Publication

04/12/2025

CVE-2024-51802 Moyenne · 6,4
Bread & Butter: AI Lead Intelligence Engine

Lead capture, gated content & newsletter opt-ins <= 7.4.857 – Authenticated (Contributor+) Stored Cross-Site Scripting

The Lead capture, gated content & newsletter opt-ins plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 7.4.857 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

Versions affectées

*-7.4.857

Correctif

7.5.880

Publication

08/11/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités