Bplugins vulnerabilities
114 CVEs and advisories name Bplugins as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-22815WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-12560Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
- CVE-2024-11882FAQ And Answers – Create Frequently Asked Questions Area on WP Sites <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-11880B Testimonial – testimonial plugin for WP <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-10666Easy Twitter Feed – Twitter feeds plugin for WP <= 1.2.6 - Authenticated (Contributor+) Post Exposure
- CVE-2024-10671Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure
- CVE-2024-10667Content Slider Block – Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post Disclosure
- CVE-2024-10669Countdown Timer block – Display the event's date into a timer. <= 1.2.4 - Authenticated (Contributor+) Post Disclosure
- CVE-2024-43296WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerability
- CVE-2022-4974Freemius SDK <= 2.4.2 - Missing Authorization Checks
- CVE-2024-47631WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-7727HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler
- CVE-2024-7721HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update
- CVE-2024-43319WordPress HTML5 Video Player plugin <= 2.5.31 - Sensitive Data Exposure vulnerability
- CVE-2024-43148WordPress StreamCast <= 2.2.3 - Stored Cross Site Scripting (XSS) vulnerability
- CVE-2024-37445WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-4398HTML5 Audio Player- Best WordPress Audio Player Plugin <= 2.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
- CVE-2024-0908Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to Information Disclosure
- CVE-2024-30432WordPress B Slider plugin <= 1.1.12 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-30438WordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-24714WordPress Icons Font Loader Plugin <= 1.1.4 is vulnerable to Arbitrary File Upload
- CVE-2024-23508WordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46084WordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL Injection
- CVE-2023-5860Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload