Vulnerabilidades em bplugins
109 resultadosAnálise Vexday
A bplugins apresenta 36 vulnerabilidades em seu histórico, com 1 crítica e 4 publicadas nos últimos 90 dias, indicando atividade contínua de descoberta de falhas. Nenhuma vulnerabilidade está sob exploração ativa conhecida (KEV), reduzindo significativamente o risco imediato. A fraqueza dominante é XSS (CWE-79), típica de componentes web, requerendo atenção em validação de entrada mas sem urgência crítica no curto prazo.
CVE-2025-12376MEDIUMIcon List Block – Add Icon-Based Lists with Custom Styles <= 1.2.1 - Authenticated (Subscriber+) Server-Side Request ForgeryEPSS 0.2%CVE-2026-62030HIGHWordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2025-27326MEDIUMWordPress Video Gallery Block plugin <= 1.1.0 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-27416MEDIUMWordPress PDF Poster plugin <= 2.4.1 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-116849MEDIUMWordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-102378HIGHWordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-62034HIGHWordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-62037HIGHWordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-62027HIGHWordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-32359MEDIUMWordPress Icon List Block plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-115955MEDIUMWordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-48195MEDIUMWordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-115961MEDIUMWordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-115956MEDIUMWordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-115966MEDIUMWordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-118097MEDIUMWordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-116400MEDIUMWordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-52709MEDIUMWordPress Video Gallery Block plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-115613MEDIUMWordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-116398MEDIUMWordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%