Bplugins vulnerabilities
114 CVEs and advisories name Bplugins as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-9203Media Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Fields
- CVE-2025-54734WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability
- CVE-2025-54710WordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control Vulnerability
- CVE-2025-8676B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure
- CVE-2025-8680B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery
- CVE-2025-54708WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-54694WordPress Button Block Plugin plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2025-8418B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation
- CVE-2025-8059B Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Function
- CVE-2025-54051WordPress LightBox Block plugin <= 1.1.30 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-27326WordPress Video Gallery Block plugin <= 1.1.0 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-2579Lottie Player <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
- CVE-2025-39524WordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-32173WordPress B Blocks plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-13731Alert Box Block – Display notice/alerts in the front end <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Alert Box Block
- CVE-2025-26952WordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26949WordPress Team Section Block plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26947WordPress Services Section block plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26945WordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26939WordPress Counters Block plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26938WordPress Countdown Timer block plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26937WordPress Icon List Block plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26881WordPress Sticky Content plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-26883WordPress Animated Text Block plugin <= 1.0.7 - Broken Access Control vulnerability
- CVE-2025-26754WordPress Timeline Block plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-22675WordPress Alert Box Block plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-13514B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider Shortcode
- CVE-2025-24595WordPress All Embed – Elementor Addons plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-22787WordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerability
- CVE-2024-13156HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via heading Parameter