Is Breakdance safe?

Every recorded flaw

• Aug 6, 2026Breakdance: Missing AuthorizationCVE-2026-65551 · fixed in 2.7 · reported by PatchstackHigh 7.5
• Jul 23, 2026Unauthenticated Cross Site Scripting (XSS) in Breakdance <= 2.7.1 versions.CVE-2026-57735 · affects up to 2.7.1 · reported by PatchstackHigh 7.1
• Jul 16, 2026Breakdance: Stored Cross-Site ScriptingCVE-2026-7543 · affects up to 2.7.1 · reported by WordfenceHigh 7.2
• Aug 1, 2024Breakdance: Unauthorized access of dataCVE-2024-5331 · affects up to 1.7.2 · reported by WordfenceMedium 4.3
• Aug 1, 2024Breakdance: Stored Cross-Site ScriptingCVE-2024-5330 · affects up to 1.7.2 · reported by WordfenceMedium 6.4
• May 14, 2024Breakdance: Remote Code ExecutionCVE-2024-4605 · affects up to 1.7.1 · reported by WordfenceHigh 8.8
• May 6, 2024Breakdance: Stored Cross-Site ScriptingCVE-2023-6854 · affects up to 1.7.0 · reported by WordfenceMedium 6.4
• Apr 3, 2024Breakdance: : Improper Control of Generation of Code ('Code Injection')CVE-2024-31390 · affects up to 1.7.2 · reported by PatchstackCritical 9.9

Records come from the National Vulnerability Database, published by the researchers who found each flaw (Wordfence, Patchstack, WPScan and others); exploited status from CISA; exploit odds from FIRST’s EPSS; current version, installs and closures from wordpress.org, checked daily. Want every plugin on your site checked at once? Run the free website check.