Bplugins vulnerabilities
114 CVEs and advisories name Bplugins as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-119500WordPress Flash & HTML5 Video plugin <= 2.14.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-119365WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-118097WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-116849WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-48195WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-52709WordPress Video Gallery Block plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-109370Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute
- CVE-2026-116613Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute
- CVE-2026-115966WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-116400WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-116398WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-116395WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115955WordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115956WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115961WordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-115613WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-62037WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-62034WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-62030WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2026-62027WordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-62044WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability
- CVE-2026-62028WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Broken Access Control vulnerability
- CVE-2026-62039WordPress Html5 Audio Player plugin <= 2.8.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-42634WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-104400WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-102378WordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-5626Survey Form Block <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission Data Export
- CVE-2026-27422WordPress YT Player plugin <= 2.1.2 - Broken Access Control vulnerability
- CVE-2026-57647WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability
- CVE-2026-57323WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerability