Skip to contentBplugins vulnerabilities
Newest
- bplugins html5 audio player – the ultimate no-code podcast, mp3 & audio playerHTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request ForgeryCVE-2025-139997.2 High
- bplugins parallax section blockWordPress Parallax Section block plugin <= 1.0.9 - Broken Authentication vulnerabilityCVE-2025-600797.1 High
- bplugins tiktok feedWordPress Tiktok Feed plugin <= 1.0.23 - Broken Access Control vulnerabilityCVE-2025-661105.3 Medium
- bplugins icon list block – add icon-based lists with custom stylesIcon List Block – Add Icon-Based Lists with Custom Styles <= 1.2.1 - Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2025-123766.4 Medium
- bplugins info cardsWordPress Info Cards Plugin <= 1.0.11 - Broken Access Control VulnerabilityCVE-2025-547117.1 High
- bplugins advanced scrollbarWordPress Advanced scrollbar plugin <= 1.1.8 - Privilege Escalation vulnerabilityCVE-2025-499008.8 High
- bplugins image gallery block – create and display photo gallery/photo album.WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 1.0.7 - Broken Authentication vulnerabilityCVE-2025-493947.1 High
- bplugins document embedder – embed pdfs, word, excel, and other filesDocument Embedder – Embed PDFs, Word, Excel, and Other Files <= 2.0.0 - Missing Authorization to Unauthenticated Document ManipulationCVE-2025-123848.6 High
- bplugins carousel block – responsive image and content carouselB Carousel Block – Responsive Image and Content Carousel <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2025-123886.4 Medium
- bplugins voice feedbackWordPress Voice Feedback plugin <= 1.0.3 - Privilege Escalation vulnerabilityCVE-2025-620078.8 High
- bplugins block for mailchimp – add email subscription forms and collect leadsBlock For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request ForgeryCVE-2025-107354.0 Medium
- bplugins media player addons for elementor – audio and video widgets for elementorMedia Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget FieldsCVE-2025-92036.4 Medium
- bplugins b sliderWordPress B Slider Plugin <= 1.1.30 - Broken Access Control VulnerabilityCVE-2025-547345.8 Medium
- bplugins tiktok feedWordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control VulnerabilityCVE-2025-547107.1 High
- bplugins bslider – create responsive image, post, product, and video slidersB Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request ForgeryCVE-2025-86804.3 Medium
- bplugins bslider – create responsive image, post, product, and video slidersB Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information ExposureCVE-2025-86764.3 Medium
- bplugins b blocksWordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-547086.5 Medium
- bplugins button blockWordPress Button Block Plugin plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-546944.3 Medium
- bplugins bslider – create responsive image, post, product, and video slidersB Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin InstallationCVE-2025-84188.8 High
- bplugins bblocks – essential gutenberg blocks & patterns collectionB Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration FunctionCVE-2025-80599.8 Critical
- bplugins lightbox blockWordPress LightBox Block plugin <= 1.1.30 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-540516.5 Medium
- bplugins video gallery blockWordPress Video Gallery Block plugin <= 1.1.0 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-273266.5 Medium
- bplugins lottie player – add interactive lottie animations with block supportLottie Player <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via File UploadCVE-2025-25796.4 Medium
- bplugins html5 audio playerWordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-395246.5 Medium
- bplugins b blocksWordPress B Blocks plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityCVE-2025-321736.5 Medium
- bplugins alert box block – display custom alerts and messagesAlert Box Block – Display notice/alerts in the front end <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Alert Box BlockCVE-2024-137316.4 Medium
- bplugins business card blockWordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-269526.5 Medium
- bplugins team section blockWordPress Team Section Block plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-269496.5 Medium
- bplugins services section blockWordPress Services Section block plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-269476.5 Medium
- bplugins info cardsWordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-269456.5 Medium
- bplugins counters blockWordPress Counters Block plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-269396.5 Medium
- bplugins countdown timerWordPress Countdown Timer block plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-269386.5 Medium
- bplugins icon list blockWordPress Icon List Block plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-269376.5 Medium
- bplugins sticky contentWordPress Sticky Content plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-268816.5 Medium
- bplugins animated text blockWordPress Animated Text Block plugin <= 1.0.7 - Broken Access Control vulnerabilityCVE-2025-268836.5 Medium
- bplugins timeline blockWordPress Timeline Block plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-267546.5 Medium
- bplugins alert box block – display notice/alerts in the front endWordPress Alert Box Block plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-226756.5 Medium
- bplugins bslider – create responsive image, post, product, and video slidersB Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider ShortcodeCVE-2024-135144.3 Medium
- bplugins all embed – elementor addonsWordPress All Embed – Elementor Addons plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-245956.5 Medium
- bplugins button blockWordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerabilityCVE-2025-227874.3 Medium
- bplugins html5 video player – embed and play videos in custom playerHTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading ParameterCVE-2024-131566.4 Medium
- bplugins button blockWordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-228156.5 Medium
- bplugins button block, button block – design stylish, interactive, and multi-functional buttons +1 moreButton Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post DuplicationCVE-2024-125604.3 Medium
- bplugins awesome faq – modern accordion, tabs,responsive & super fast faq builder.FAQ And Answers – Create Frequently Asked Questions Area on WP Sites <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-118826.4 Medium
- bplugins b testimonial – customer testimonials in custom layoutsB Testimonial – testimonial plugin for WP <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-118806.4 Medium
- bplugins feeds for twitter – embed social media posts with live updatesEasy Twitter Feed – Twitter feeds plugin for WP <= 1.2.6 - Authenticated (Contributor+) Post ExposureCVE-2024-106664.3 Medium
- bplugins button block, button block – design stylish, interactive, and multi-functional buttons +1 moreButton Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post DisclosureCVE-2024-106714.3 Medium
- bplugins content slider block – slide through text or media contentContent Slider Block – Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post DisclosureCVE-2024-106674.3 Medium
- bplugins countdown timer block – animated countdown for events or launchesCountdown Timer block – Display the event's date into a timer. <= 1.2.4 - Authenticated (Contributor+) Post DisclosureCVE-2024-106694.3 Medium
- bplugins html5 video player, bplugins llc flash & html5 video +1 moreWordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerabilityCVE-2024-432964.3 Medium
- Show moreLoading…