WP Business Intelligence Lite

WP Business Intelligence Lite has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2026; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 8.0, and the most serious one scores 9.8 out of 10. Severity breakdown: 2 critical and 1 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 2 of the records (50%). Other recurring categories include SQL Injection, Unrestricted Upload Of File With Dangerous Type.

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2026.

4 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

8.0/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all WP Business Intelligence Lite vulnerabilities before they are exploited.

Most severe open issueCVSS 8.0CVE-2026-15293

WP Business Intelligence Lite <= 3.2.0 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via Arbitrary SQL Modification

Read the full analysis

Vulnerability Records

4 records


2026-05-05 00:00	WP Business Intelligence Lite <= 3.2.0 - Missing Authorization WP Business Intelligence Lite <= 3.2.0	`N/A`	4.3 Medium	Nabil Irawan - Heroes Cyber Security	No
2026-05-04 14:06	WP Business Intelligence Lite <= 3.2.0 - Authenticated (Subscriber+) Missing Authorization to Privilege Escalation via Arbitrary SQL Modification WP Business Intelligence Lite <= 3.2.0	`CVE-2026-15293`	8.0 High	Nabil Irawan	No
2015-04-01 00:00	WP Business Intelligence Lite <= 1.6.2 - SQL Injection WP Business Intelligence Lite <= 1.6.2	`CVE-2015-9326`	9.8 Critical	Jagriti Sahu AKA Incredible	Yes
2014-03-28 00:00	WP Business intelligence lite < 1.3 - Arbitrary File Upload WP Business Intelligence Lite < 1.3	`N/A`	9.8 Critical	Manish Kishan Tanwar	Yes

Showing 1–4 of 4 reports