Vulnerabilities in bplugins

84 results
Vexday analysis

A bplugins apresenta 36 vulnerabilidades em seu histórico, com 1 crítica e 4 publicadas nos últimos 90 dias, indicando atividade contínua de descoberta de falhas. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV), reduzindo significativamente o risco imediato. A fraqueza dominante é XSS (CWE-79), típica de componentes web, requerendo atenção em validação de entrada mas sem urgência crítica no curto prazo.

CVE-2025-54711HIGHWordPress Info Cards Plugin <= 1.0.11 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2024-37445MEDIUMWordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26881MEDIUMWordPress Sticky Content plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26947MEDIUMWordPress Services Section block plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26949MEDIUMWordPress Team Section Block plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-57647HIGHWordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerabilityEPSS 0.3%CVE-2025-26952MEDIUMWordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-26937MEDIUMWordPress Icon List Block plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-26945MEDIUMWordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-26939MEDIUMWordPress Counters Block plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-47631MEDIUMWordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-0833MEDIUMTeam Section Block <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Network LinkEPSS 0.2%CVE-2025-60079HIGHWordPress Parallax Section block plugin <= 1.0.9 - Broken Authentication vulnerabilityEPSS 0.2%CVE-2026-32489MEDIUMWordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-54710HIGHWordPress Tiktok Feed Plugin <= 1.0.21 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2025-9203MEDIUMMedia Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget FieldsEPSS 0.2%CVE-2026-6446MEDIUMMy Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX ActionEPSS 0.2%CVE-2025-22675MEDIUMWordPress Alert Box Block plugin <= 1.1.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-26754MEDIUMWordPress Timeline Block plugin <= 1.1.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-4120MEDIUMInfo Cards <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block AttributesEPSS 0.2%