Bug Library

Bug Library has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2025; all 4 are fixed as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 2 of the records (50%). Other recurring categories include SQL Injection, Unrestricted Upload Of File With Dangerous Type.

Every one of the 4 issues recorded for Bug Library has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by Bob Matyas. Bug Library is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.5.10.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Bug Library vulnerabilities before they are exploited.

Highest severity on recordCVSS 9.8CVE-2024-5450

Bug Library <= 2.1 - Unauthenticated Arbitrary File Upload

Read the full analysis

Vulnerability Records

4 records


2025-01-24 00:00	Bug Library <= 2.1.4 - Authenticated (Contributor+) SQL Injection Bug Library <= 2.1.4	`CVE-2025-24728`	6.5 Medium	stealthcopter	Yes
2024-06-28 00:00	Bug Library <= 2.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting Bug Library <= 2.1.1	`CVE-2024-5604`	4.4 Medium	Bob Matyas	Yes
2024-06-22 00:00	Bug Library <= 2.1 - Unauthenticated Arbitrary File Upload Bug Library <= 2.1	`CVE-2024-5450`	9.8 Critical	Bob Matyas	Yes
2021-09-09 00:00	Bug Library <= 2.0.3 - Reflected Cross-Site Scripting Bug Library <= 2.0.3	`CVE-2021-38355`	6.1 Medium	p7e4	Yes

Showing 1–4 of 4 reports

Latestv2.1.6

Bug Library

Author

Yannick Lefebvre

4.7(6)

94/100

Last Updated

2025-01-20 (2y ago)

Active Installs

100+

Downloads

15,470

Requires WP

3.0+

Requires PHP

Tested up to

WP 6.5.10

Created

2011-01-25 (16y ago)

This plugin provides an easy way to incorporate a bug/enhancement tracking system to a WordPress site. By adding a shortcode to a page, users will be able to display a bug list and allow visitors to submit new bugs / enhancements. The plugin will also provide search and sorting capabilities. A captcha and approval mechanism will allow the site admin to avoid spam. You can try it out in a temporary copy of WordPress here. Changelog Support Forum

View on WordPress.org