Vulnerabilities in bPlugins
110 resultsCVE-2026-32489MEDIUMWordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-13999HIGHHTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request ForgeryEPSS 0.2%CVE-2025-54710HIGHWordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-54708MEDIUMWordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2025-26754MEDIUMWordPress Timeline Block plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-32416MEDIUMWordPress PDF Poster plugin <= 2.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-22675MEDIUMWordPress Alert Box Block plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-12388MEDIUMB Carousel Block – Responsive Image and Content Carousel <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request ForgeryEPSS 0.2%CVE-2026-4120MEDIUMInfo Cards <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block AttributesEPSS 0.2%CVE-2026-42634HIGHWordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-6446MEDIUMMy Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX ActionEPSS 0.2%CVE-2026-1389MEDIUMDocument Embedder <= 2.0.4 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry DeletionEPSS 0.2%CVE-2025-66110MEDIUMWordPress Tiktok Feed plugin <= 1.0.23 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-54734MEDIUMWordPress B Slider Plugin <= 1.1.30 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-22815MEDIUMWordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-109370MEDIUMDocument Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block AttributeEPSS 0.2%CVE-2026-1228MEDIUMTimeline Block <= 1.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via Shortcode AttributeEPSS 0.2%CVE-2026-11402MEDIUMServices Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block AttributeEPSS 0.2%CVE-2026-119365MEDIUMWordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-54051MEDIUMWordPress LightBox Block plugin <= 1.1.30 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%