Known vulnerabilities in Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress

Create and add personal portfolio to your WordPress website. Manage and showcase past projects to get more clients.

3Reported vulnerabilities

8.8Highest CVSS score

2.58Latest version

600+Active installs

What to do now

Update Portfolio by BestWebSoft – Work and Projects Presentation Plugin for WordPress to 2.06 or later. 2 of these have a fixed version available. Updating resolves them.

Plugin last updated: June 9, 2025 / Tested up to WordPress: 6.8.8 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVE	Severity	Exploit probability next 30 days	Affected versions	Fixed in	Published
CVE-2012-10017	High 8.8	0.4%	Before 2.06	`2.06`	December 26, 2023
CVE-2025-58245	Medium 6.4	0.2%	2.58 and earlier	—	September 22, 2025
WF-4148b37e-c5dd-43a1-aecf-085ce4fb2473	Medium 6.1	—	Before 2.4.0	`2.4.0`	April 12, 2017

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.