Vulnerabilidades en bplugins
110 resultadosCVE-2026-62044HIGHWordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerabilityEPSS 0.3%CVE-2025-54711HIGHWordPress Info Cards Plugin <= 1.0.11 - Broken Access Control VulnerabilityEPSS 0.3%CVE-2025-49394HIGHWordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 1.0.7 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2025-26938MEDIUMWordPress Countdown Timer block plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-0833MEDIUMTeam Section Block <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Network LinkEPSS 0.3%CVE-2026-39579HIGHWordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerabilityEPSS 0.3%CVE-2026-116613HIGHAnimated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode AttributeEPSS 0.3%CVE-2024-13362MEDIUMFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterEPSS 0.3%CVE-2024-43148MEDIUMWordPress StreamCast <= 2.2.3 - Stored Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-60079HIGHWordPress Parallax Section block plugin <= 1.0.9 - Broken Authentication vulnerabilityEPSS 0.3%CVE-2025-26947MEDIUMWordPress Services Section block plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26949MEDIUMWordPress Team Section Block plugin <= 1.0.9 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26881MEDIUMWordPress Sticky Content plugin <= 1.0.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-37445MEDIUMWordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26939MEDIUMWordPress Counters Block plugin <= 1.1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26945MEDIUMWordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26952MEDIUMWordPress Business Card Block plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-26937MEDIUMWordPress Icon List Block plugin <= 1.1.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-9203MEDIUMMedia Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget FieldsEPSS 0.3%CVE-2024-47631MEDIUMWordPress Logo Carousel – Clients logo carousel for WP plugin <= 1.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%