Skip to contentBplugins vulnerabilities
Newest
- 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksCVE-2022-49746.3 Medium
- bplugins logo carousel – clients logo carousel for wpWordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-476316.5 Medium
- bplugins html5 video player, html5 video player – embed and play videos in custom player +1 moreHTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handlerCVE-2024-77275.3 Medium
- bplugins html5 video player, html5 video player – embed and play videos in custom player +1 moreHTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options UpdateCVE-2024-77214.3 Medium
- bplugins streamcastWordPress StreamCast <= 2.2.3 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2024-431485.9 Medium
- bplugins html5 audio playerWordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-374456.5 Medium
- bplugins html5 video playerHTML5 Video Player < 2.5.27 - Unauthenticated SQLiCVE-2024-5522Public exploit6.5 Medium
- bplugins html5 audio player – the ultimate no-code podcast, mp3 & audio playerHTML5 Audio Player- Best WordPress Audio Player Plugin <= 2.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsCVE-2024-43986.4 Medium
- abuhayat advanced post block, bplugins advanced post block – showcase posts with grid, list, card layouts and filters +1 moreAdvanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to Information DisclosureCVE-2024-09085.3 Medium
- bplugins b slider - slider for your block editorWordPress B Slider plugin <= 1.1.12 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-304326.5 Medium
- bplugins print page blockWordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-304386.5 Medium
- bplugins icons font loaderWordPress Icons Font Loader Plugin <= 1.1.4 is vulnerable to Arbitrary File UploadCVE-2024-247147.2 High
- bplugins pdf poster – pdf embedder plugin for wordpress, pdf poster +1 moreWordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS)CVE-2024-235087.1 High
- bplugins html5 video playerThe 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL...CVE-2024-1061EPSS 11.1%8.6 High
- bplugins html5 video playerHtml5 Video Player < 2.5.19 - Subscriber+ Stored XSSCVE-2023-64855.4 Medium
- bplugins icons font loaderWordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL InjectionCVE-2023-460848.5 High
- bplugins icons font loader, icons font loader – load web fonts and icon libraries +1 moreIcons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File UploadCVE-2023-58607.2 High
- bplugins html5 audio playerHtml5 Audio Player < 2.1.12 - Contributor+ Stored XSSCVE-2023-01705.4 Medium
- bplugins document embedderDocument Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title DisclosureCVE-2021-248684.3 Medium
- bplugins document embedderDocument Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title DisclosureCVE-2021-247755.3 Medium
- bplugins video player for youtube, video player for youtube project player for youtube +1 moreYT Player < 1.4 - Contributor+ Stored Cross-Site ScriptingCVE-2021-244145.4 Medium
- bplugins streamcast – radio player for wordpress, streamcast radio player +1 moreStreamCast < 2.1.1 - Contributor+ Stored Cross-Site ScriptingCVE-2021-244165.4 Medium
- bplugins polo video gallery, unknown polo video gallery – best wordpress video gallery plugin +1 morePolo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site ScriptingCVE-2021-244155.4 Medium
- bplugins easy twitter feedEasy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site ScriptingCVE-2021-244135.4 Medium
- bplugins html5 audio player, unknown html5 audio player – audio player for wordpress +1 moreHtml5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site ScriptingCVE-2021-244125.4 Medium