Vulnerabilities in bplugins
84 resultsVexday analysis
A bplugins apresenta 36 vulnerabilidades em seu histórico, com 1 crítica e 4 publicadas nos últimos 90 dias, indicando atividade contínua de descoberta de falhas. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV), reduzindo significativamente o risco imediato. A fraqueza dominante é XSS (CWE-79), típica de componentes web, requerendo atenção em validação de entrada mas sem urgência crítica no curto prazo.
CVE-2026-57323MEDIUMWordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-54734MEDIUMWordPress B Slider Plugin <= 1.1.30 - Broken Access Control VulnerabilityEPSS 0.2%CVE-2026-32416MEDIUMWordPress PDF Poster plugin <= 2.4.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-12388MEDIUMB Carousel Block – Responsive Image and Content Carousel <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request ForgeryEPSS 0.2%CVE-2026-27422MEDIUMWordPress YT Player plugin <= 2.0.9 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-13999HIGHHTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request ForgeryEPSS 0.2%CVE-2025-22815MEDIUMWordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-54708MEDIUMWordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-11402MEDIUMServices Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block AttributeEPSS 0.2%CVE-2025-66110MEDIUMWordPress Tiktok Feed plugin <= 1.0.23 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-5626MEDIUMSurvey Form Block <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission Data ExportEPSS 0.2%CVE-2026-1389MEDIUMDocument Embedder <= 2.0.4 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry DeletionEPSS 0.2%CVE-2026-27416MEDIUMWordPress PDF Poster plugin <= 2.4.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-12376MEDIUMIcon List Block – Add Icon-Based Lists with Custom Styles <= 1.2.1 - Authenticated (Subscriber+) Server-Side Request ForgeryEPSS 0.2%CVE-2026-1228MEDIUMTimeline Block <= 1.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via Shortcode AttributeEPSS 0.2%CVE-2026-56063HIGHWordPress MailChimp Block plugin <= 1.1.15 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-54051MEDIUMWordPress LightBox Block plugin <= 1.1.30 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-32359MEDIUMWordPress Icon List Block plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-27326MEDIUMWordPress Video Gallery Block plugin <= 1.1.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-24520MEDIUMWordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerabilityEPSS 0.2%