← WordPress Vulnerabilities
WordPress security by component

BBS e-Franchise

BBS e-Franchise is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 15, 2026; the highest CVE/CNA score is 8.8.

Plugin slug: bbs-e-franchise

CVE-2016-20072: BBS e-Franchise: SQL injection

BBS e-Franchise is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 1.1.1.

PublishedJun 15, 2026
Safe version guidanceSee mitigation notes
Safe version
Jun 15, 2026 CVE-2016-20072
BBS e-Franchise: SQL injection
BBS e-Franchise is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is 1.1.1.
See mitigation notes
CVE8.8
NVDPending