Vulnerabilities in bPlugins

84 results
Vexday analysis

A bPlugins apresenta 46 vulnerabilidades catalogadas sem nenhuma sob exploração ativa no momento, reduzindo o risco imediato. A fraqueza dominante é injeção de conteúdo (CWE-79), típica de plugins web, com 6 novas descobertas nos últimos 90 dias indicando exposição contínua. Apesar de nenhuma criticidade CVSS 9-10, o volume moderado e a cadência recente de divulgações sugerem necessidade de monitoramento regular e aplicação de patches.

CVE-2026-39579HIGHWordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2024-43148MEDIUMWordPress StreamCast <= 2.2.3 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-0833MEDIUMTeam Section Block <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Network LinkEPSS 0.3%CVE-2025-49394HIGHWordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 1.0.7 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2025-60079HIGHWordPress Parallax Section block plugin <= 1.0.9 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2025-54711HIGHWordPress Info Cards Plugin <= 1.0.11 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2025-26949MEDIUMWordPress Team Section Block plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26881MEDIUMWordPress Sticky Content plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26947MEDIUMWordPress Services Section block plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-37445MEDIUMWordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26937MEDIUMWordPress Icon List Block plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26945MEDIUMWordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26952MEDIUMWordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26939MEDIUMWordPress Counters Block plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-47631MEDIUMWordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-9203MEDIUMMedia Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget FieldsEPSS 0.2%CVE-2025-13999HIGHHTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request ForgeryEPSS 0.2%CVE-2025-54710HIGHWordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-32489MEDIUMWordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerabilityEPSS 0.2%