CVEs we hold for Bplugins
Records whose assigning authority named Bplugins as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-6446My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via…bplugins My Social Feeds – Social Feeds Embedder Plugin for…
CVE-2026-57647WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerabilitybPlugins Panorama Viewer – 360 Degree Image + Video Viewer
CVE-2026-57323WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerabilitybPlugins Flash & HTML5 Video
CVE-2026-5626Survey Form Block <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission Data Exportbplugins Survey Form Block – collect answers and insights…
CVE-2026-56063WordPress MailChimp Block plugin <= 1.1.15 - Broken Access Control vulnerabilitybPlugins MailChimp Block
CVE-2026-53736Easy Twitter Feeds before 1.2.13 Cross-Site Request Forgery via duplicate_post Actionbplugins Easy Twitter Feeds
CVE-2026-4120Info Cards <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributesbplugins Info Cards – Add Text and Media in Card Layouts
CVE-2026-40729WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerabilitybPlugins 3D viewer – Embed 3D Models
CVE-2026-39579WordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerabilitybPlugins B Blocks
CVE-2026-32489WordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerabilitybPlugins B Blocks
CVE-2026-32416WordPress PDF Poster plugin <= 2.4.0 - Broken Access Control vulnerabilitybPlugins PDF Poster
CVE-2026-32359WordPress Icon List Block plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerabilitybPlugins Icon List Block
CVE-2026-27422WordPress YT Player plugin <= 2.0.9 - Broken Access Control vulnerabilitybPlugins YT Player
CVE-2026-27416WordPress PDF Poster plugin <= 2.4.1 - Broken Access Control vulnerabilitybPlugins PDF Poster
CVE-2026-24565WordPress B Accordion plugin <= 2.0.2 - Sensitive Data Exposure vulnerabilitybPlugins B Accordion
CVE-2026-24520WordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerabilitybPlugins Tiktok Feed
CVE-2026-24383WordPress B Slider plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerabilitybPlugins B Slider
CVE-2026-1389Document Embedder <= 2.0.4 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library…bplugins Document Embedder – Embed PDFs, Word, Excel, and…
CVE-2026-1294All In One Image Viewer Block <= 1.0.2 - Unauthenticated Server-Side Request Forgery via image-proxy Endpointbplugins All In One Image Viewer Block – Gutenberg block to…
CVE-2026-1228Timeline Block <= 1.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via…bplugins Timeline Block – Beautiful Timeline Builder for…
CVE-2026-11402Services Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block Attributebplugins Services Section Block – Showcase Service Details…
CVE-2026-0833Team Section Block <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Network Linkbplugins Team Section Block – Showcase Team Members with…
CVE-2025-9203Media Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple…bplugins Media Player Addons for Elementor – Audio and…
CVE-2025-8680B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgerybplugins bSlider – Create Responsive Image, Post, Product…
CVE-2025-8676B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information Exposurebplugins bSlider – Create Responsive Image, Post, Product…
CVE-2025-8418B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary…bplugins bSlider – Create Responsive Image, Post, Product…
CVE-2025-8059B Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Functionbplugins bBlocks – Essential Gutenberg Blocks & Patterns…
CVE-2025-66110WordPress Tiktok Feed plugin <= 1.0.23 - Broken Access Control vulnerabilitybPlugins Tiktok Feed
CVE-2025-62007WordPress Voice Feedback plugin <= 1.0.3 - Privilege Escalation vulnerabilitybPlugins Voice Feedback
CVE-2025-60079WordPress Parallax Section block plugin <= 1.0.9 - Broken Authentication vulnerabilitybPlugins Parallax Section block
CVE-2025-54734WordPress B Slider Plugin <= 1.1.30 - Broken Access Control VulnerabilitybPlugins B Slider
CVE-2025-54711WordPress Info Cards Plugin <= 1.0.11 - Broken Access Control VulnerabilitybPlugins Info Cards
CVE-2025-54710WordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control VulnerabilitybPlugins Tiktok Feed
CVE-2025-54708WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) VulnerabilitybPlugins B Blocks
CVE-2025-54694WordPress Button Block Plugin plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) VulnerabilitybPlugins Button Block
CVE-2025-54051WordPress LightBox Block plugin <= 1.1.30 - Cross Site Scripting (XSS) VulnerabilitybPlugins LightBox Block
CVE-2025-49900WordPress Advanced scrollbar plugin <= 1.1.8 - Privilege Escalation vulnerabilitybPlugins Advanced scrollbar
CVE-2025-49394WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 1.0.7 - Broken Authentication…bPlugins Image Gallery block – Create and display photo…
CVE-2025-39524WordPress Html5 Audio Player plugin <= 2.2.28 - Cross Site Scripting (XSS) VulnerabilitybPlugins Html5 Audio Player
CVE-2025-32173WordPress B Blocks plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerabilitybPlugins B Blocks
CVE-2025-27326WordPress Video Gallery Block plugin <= 1.1.0 - Cross Site Scripting (XSS) VulnerabilitybPlugins Video Gallery Block
CVE-2025-26952WordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilitybPlugins Business Card Block
CVE-2025-26949WordPress Team Section Block plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilitybPlugins Team Section Block
CVE-2025-26947WordPress Services Section block plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilitybPlugins Services Section block
CVE-2025-26945WordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilitybPlugins Info Cards
CVE-2025-26939WordPress Counters Block plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilitybPlugins Counters Block
CVE-2025-26938WordPress Countdown Timer block plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilitybPlugins Countdown Timer
CVE-2025-26937WordPress Icon List Block plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerabilitybPlugins Icon List Block
CVE-2025-26883WordPress Animated Text Block plugin <= 1.0.7 - Broken Access Control vulnerabilitybPlugins Animated Text Block
CVE-2025-26881WordPress Sticky Content plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilitybPlugins Sticky Content
CVE-2025-26754WordPress Timeline Block plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerabilitybPlugins Timeline Block
CVE-2025-2579Lottie Player <= 1.1.8 - Authenticated (Author+) Stored Cross-Site Scripting via File Uploadbplugins Lottie Player – Add Interactive Lottie Animations…
CVE-2025-24595WordPress All Embed – Elementor Addons plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerabilitybPlugins All Embed – Elementor Addons
CVE-2025-22815WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerabilitybPlugins Button Block
CVE-2025-22787WordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerabilitybPlugins Button Block
CVE-2025-22675WordPress Alert Box Block plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilitybPlugins Alert Box Block – Display notice/alerts in the…
CVE-2025-13999HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side…bplugins HTML5 Audio Player – The Ultimate No-Code Podcast…
CVE-2025-12388B Carousel Block – Responsive Image and Content Carousel <= 1.1.5 - Missing Authorization to Authenticated…bplugins Carousel Block – Responsive Image and Content…
CVE-2025-12384Document Embedder – Embed PDFs, Word, Excel, and Other Files <= 2.0.0 - Missing Authorization to Unauthenticated…bplugins Document Embedder – Embed PDFs, Word, Excel, and…
CVE-2025-12376Icon List Block – Add Icon-Based Lists with Custom Styles <= 1.2.1 - Authenticated (Subscriber+) Server-Side Request…bplugins Icon List Block – Add Icon-Based Lists with Custom…
CVE-2025-10735Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgerybplugins Block for Mailchimp – Add Email Subscription Forms…
CVE-2024-7727HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via…bplugins HTML5 Video Player – Embed and Play Videos in…
CVE-2024-7721HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+)…bplugins HTML5 Video Player – Embed and Play Videos in…
CVE-2024-47631WordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilitybPlugins Logo Carousel – Clients logo carousel for WP
CVE-2024-4398HTML5 Audio Player- Best WordPress Audio Player Plugin <= 2.2.19 - Authenticated (Contributor+) Stored Cross-Site…bplugins HTML5 Audio Player – The Ultimate No-Code Podcast…
CVE-2024-43319WordPress HTML5 Video Player plugin <= 2.5.31 - Sensitive Data Exposure vulnerabilitybPlugins LLC Flash & HTML5 Video
CVE-2024-43296WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerabilitybPlugins LLC Flash & HTML5 Video
CVE-2024-43148WordPress StreamCast <= 2.2.3 - Stored Cross Site Scripting (XSS) vulnerabilitybPlugins StreamCast
CVE-2024-37445WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerabilitybPlugins Html5 Audio Player
CVE-2024-30438WordPress Print Page block plugin <= 1.0.8 - Cross Site Scripting (XSS) vulnerabilitybPlugins Print Page block
CVE-2024-30432WordPress B Slider plugin <= 1.1.12 - Cross Site Scripting (XSS) vulnerabilitybPlugins B Slider - Slider for your block editor
CVE-2024-24714WordPress Icons Font Loader Plugin <= 1.1.4 is vulnerable to Arbitrary File UploadbPlugins LLC Icons Font Loader
CVE-2024-23508WordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS)bPlugins PDF Poster – PDF Embedder Plugin for WordPress
CVE-2024-13731Alert Box Block – Display notice/alerts in the front end <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site…bplugins Alert Box Block – Display Custom Alerts and…
CVE-2024-13514B Slider- Gutenberg Slider Block for WP <= 1.1.23 - Authenticated (Contributor+) Private Post Disclosure via bsb-slider…bplugins bSlider – Create Responsive Image, Post, Product…
CVE-2024-13156HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.35 - Authenticated (Contributor+) DOM-Based Stored…bplugins HTML5 Video Player – Embed and Play Videos in…
CVE-2024-12560Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post…bplugins Button Block – Design Stylish, Interactive, and…
CVE-2024-11882FAQ And Answers – Create Frequently Asked Questions Area on WP Sites <= 1.1.0 - Authenticated (Contributor+) Stored…bplugins Awesome FAQ – Modern Accordion, Tabs,Responsive &…
CVE-2024-11880B Testimonial – testimonial plugin for WP <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scriptingbplugins B Testimonial – Customer Testimonials in Custom…
CVE-2024-10671Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosurebplugins Button Block – Design Stylish, Interactive, and…
CVE-2024-10669Countdown Timer block – Display the event's date into a timer. <= 1.2.4 - Authenticated (Contributor+) Post Disclosurebplugins Countdown Timer Block – Animated Countdown for…
CVE-2024-10667Content Slider Block – Create fully functional slider with Gutenberg block <= 3.1.5 - Authenticated (Contributor+) Post…bplugins Content Slider Block – Slide Through Text or Media…
CVE-2024-10666Easy Twitter Feed – Twitter feeds plugin for WP <= 1.2.6 - Authenticated (Contributor+) Post Exposurebplugins Feeds for Twitter – Embed Social Media Posts with…
CVE-2024-0908Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to…bplugins Advanced Post Block – Showcase Posts with Grid…
CVE-2023-5860Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Uploadbplugins Icons Font Loader – Load Web Fonts and Icon…
CVE-2023-46084WordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL InjectionbPlugins LLC Icons Font Loader
86 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.