CVE-2020-8658

The CVE concerns WordPress plugin BestWebSoft Htaccess (

CVE-2017-18496

Summary for CVE-2017-18496 : The WordPress htaccess plugin from BestWebSoft, prior to version 1.7.6, contains multiple Cross‑Site Scripting (XSS) flaws. Technical details across sources indicate the vulnerability resides in the htaccess plugin’s handling of user-supplied data, enabling an authent...

CVE-2017-2171

CVE-2017-2171 detail: A cross-site scripting vulnerability affects BestWebSoft WordPress plugins that display the BestWebSoft menu. The issue arises from a common function used to render the menu (CWE-79), enabling remote attackers to execute arbitrary script in a logged-in user’s browser. Affect...