Bplugins vulnerabilities

Products

• Html5 Video Player 6
• B Blocks 5
• Bslider – Create Responsive Image, Post, Product, And Video Sliders 4
• Button Block 4
• Button Block 4
• Html5 Audio Player 4
• B Slider 3
• Html5 Audio Player 3
• Html5 Audio Player – The Ultimate No-code Podcast, Mp3 & Audio Player 3
• Html5 Video Player – Embed And Play Videos In Custom Player 3
• Icons Font Loader 3
• Pdf Poster 3
• Streamcast 3
• Tiktok Feed 3
• Video Player For Youtube 3
• Bblocks – Essential Gutenberg Blocks & Patterns Collection 2
• Before After Image Comparison – Image Comparison For Wp 2
• Button Block – Design Stylish, Interactive, And Multi-functional Buttons 2
• Document Embedder 2
• Document Embedder – Embed Pdfs, Word, Excel, And Other Files 2
• Flash & Html5 Video 2
• Icon List Block 2
• Image Gallery Block – Create And Display Photo Gallery/photo Album. 2
• Info Cards 2
• Lightbox Block 2
• Panorama Viewer – 360 Degree Image + Video Viewer 2
• Parallax Section Block 2
• Team Section Block 2
• Video Gallery Block 2

Newest

• bplugins media player addons for elementor – media player widget for wp WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability CVE-2026-119365 6.5 MediumOctober 30, 2026
• bplugins flash & html5 video WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-118097 6.5 MediumOctober 29, 2026
• bplugins streamcast WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-116849 6.5 MediumOctober 29, 2026
• bplugins pdf poster WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-48195 6.5 MediumOctober 29, 2026
• bplugins video gallery block WordPress Video Gallery Block plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-52709 6.5 MediumOctober 29, 2026
• bplugins video player for youtube YT Player < 2.1.4 - Contributor+ Missing Authorization via ytp_ajax CVE-2026-85007 3.8 LowOctober 29, 2026
• bplugins document embedder – let visitors read files without downloading Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute CVE-2026-109370 6.4 MediumOctober 28, 2026
• bplugins animated text block – add typing and looping text effects Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute CVE-2026-116613 7.5 HighOctober 28, 2026
• bplugins typing text – give your texts many typing effects WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-115966 6.5 MediumOctober 26, 2026
• bplugins button block WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-116400 6.5 MediumOctober 26, 2026
• bplugins content slider block WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-116398 6.5 MediumOctober 26, 2026
• bplugins lightbox block WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-116395 6.5 MediumOctober 26, 2026
• bplugins advanced post block - post grid for wordpress block editor WordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-115955 6.5 MediumOctober 26, 2026
• bplugins panorama viewer – 360 degree image + video viewer WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-115956 6.5 MediumOctober 26, 2026
• bplugins b slider WordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-115961 6.5 MediumOctober 26, 2026
• bplugins image gallery block – create and display photo gallery/photo album. WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-115613 6.5 MediumOctober 26, 2026
• bplugins document embedder WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability CVE-2026-62037 7.1 HighOctober 10, 2026
• bplugins before after image comparison – image comparison for wp WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability CVE-2026-62034 7.1 HighOctober 10, 2026
• bplugins streamcast WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-62030 7.2 HighOctober 10, 2026
• bplugins team section block WordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-62027 7.1 HighOctober 10, 2026
• bplugins super video player WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability CVE-2026-62044 7.2 HighOctober 10, 2026
• bplugins before after image comparison – image comparison for wp WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Broken Access Control vulnerability CVE-2026-62028 5.4 MediumOctober 9, 2026
• bplugins html5 audio player WordPress Html5 Audio Player plugin <= 2.8.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-62039 6.5 MediumOctober 9, 2026
• bplugins video background block – use video as background in the section. WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-42634 7.1 HighOctober 6, 2026
• bplugins b blocks WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-104400 6.5 MediumOctober 5, 2026
• bplugins parallax section block WordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-102378 7.1 HighOctober 1, 2026
• bplugins video player for youtube YT Player < 2.1.0 - Contributor+ SQLi via ytp_ajax CVE-2026-84937 6.8 MediumSeptember 5, 2026
• bplugins survey form block – collect answers and insights from your audience Survey Form Block <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission Data Export CVE-2026-5626 4.3 MediumJuly 29, 2026
• bplugins yt player WordPress YT Player plugin <= 2.1.2 - Broken Access Control vulnerability CVE-2026-27422 5.3 MediumJuly 23, 2026
• bplugins panorama viewer – 360 degree image + video viewer WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability CVE-2026-57647 7.5 HighJune 26, 2026
• bplugins flash & html5 video WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerability CVE-2026-57323 5.8 MediumJune 26, 2026
• bplugins mailchimp block WordPress MailChimp Block plugin <= 1.1.15 - Broken Access Control vulnerability CVE-2026-56063 8.3 HighJune 26, 2026
• bplugins services section block – showcase service details in grid or columns Services Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block Attribute CVE-2026-11402 6.4 MediumJune 18, 2026
• bplugins b blocks WordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerability CVE-2026-39579 8.8 HighJune 15, 2026
• bplugins easy twitter feeds Easy Twitter Feeds before 1.2.13 Cross-Site Request Forgery via duplicate_post Action CVE-2026-53736 5.1 MediumJune 10, 2026
• bplugins tiktok feed WordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerability CVE-2026-24520 4.3 MediumMay 26, 2026
• bplugins pdf poster WordPress PDF Poster plugin <= 2.4.1 - Broken Access Control vulnerability CVE-2026-27416 5.3 MediumMay 7, 2026
• bplugins my social feeds – social feeds embedder plugin for wordpress My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action CVE-2026-6446 5.4 MediumMay 2, 2026
• 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter CVE-2024-13362 6.1 MediumMay 1, 2026
• bplugins 3d viewer – embed 3d models WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerability CVE-2026-40729 4.3 MediumApril 15, 2026
• bplugins b blocks WordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerability CVE-2026-32489 6.5 MediumMarch 25, 2026
• bplugins info cards – add text and media in card layouts Info Cards <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes CVE-2026-4120 6.4 MediumMarch 19, 2026
• bplugins pdf poster WordPress PDF Poster plugin <= 2.4.0 - Broken Access Control vulnerability CVE-2026-32416 5.4 MediumMarch 13, 2026
• bplugins icon list block WordPress Icon List Block plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-32359 6.5 MediumMarch 13, 2026
• bplugins timeline block – beautiful timeline builder for wordpress (vertical & horizontal timelines) Timeline Block <= 1.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via Shortcode Attribute CVE-2026-1228 4.3 MediumFebruary 6, 2026
• bplugins all in one image viewer block – gutenberg block to create image viewer with hyperlink All In One Image Viewer Block <= 1.0.2 - Unauthenticated Server-Side Request Forgery via image-proxy Endpoint CVE-2026-1294 7.2 HighFebruary 5, 2026
• bplugins document embedder – embed pdfs, word, excel, and other files Document Embedder <= 2.0.4 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion CVE-2026-1389 4.3 MediumJanuary 28, 2026
• bplugins b accordion WordPress B Accordion plugin <= 2.0.2 - Sensitive Data Exposure vulnerability CVE-2026-24565 6.5 MediumJanuary 23, 2026
• bplugins b slider WordPress B Slider plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-24383 6.5 MediumJanuary 22, 2026
• bplugins team section block – showcase team members with layout options Team Section Block <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Network Link CVE-2026-0833 6.4 MediumJanuary 17, 2026
• Show olderLoading…