CVE-2026-125451mediumCWE-79

CVE-2026-125451: medium-severity vulnerability in bPlugins B Blocks

WordPress B Blocks plugin <= 2.1.15 - Cross Site Scripting (XSS) vulnerability

Published

Follow this CVE+ Monitor B Blocks

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

10Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through 2.1.15.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
bPlugins · B Blocks
Related CVEs — bPlugins B Blocks

In the same product, most dangerous first.

CVE-2025-32173MEDIUMWordPress B Blocks plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-39579HIGHWordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-32489MEDIUMWordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-54708MEDIUMWordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-104400MEDIUMWordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%