Login Request a demo
BP
Vendor
bPlugins
39 products with CVEs on record
59
CVEs
0
On KEV
20
New 30D
Products
BA
Before After Image Comparison – Image comparison for WP
bPlugins
7.1
2 CVEs0 on KEV2 new
BB
Button Block
bPlugins
8.8
5 CVEs0 on KEV1 new
HA
Html5 Audio Player
bPlugins
6.5
4 CVEs0 on KEV1 new
DE
Document Embedder
bPlugins
7.1
3 CVEs0 on KEV1 new
BB
B Blocks
bPlugins
8.8
2 CVEs0 on KEV1 new
PV
Panorama Viewer – 360 Degree Image + Video Viewer
bPlugins
7.5
2 CVEs0 on KEV1 new
AP
Advanced Post Block - Post Grid for WordPress block editor
bPlugins
6.5
1 CVEs0 on KEV1 new
AT
Animated Text Block – Add Typing and Looping Text Effects
bplugins
7.5
1 CVEs0 on KEV1 new
BS
B Slider
bPlugins
6.5
1 CVEs0 on KEV1 new
CS
Content Slider Block
bPlugins
6.5
1 CVEs0 on KEV1 new
DE
Document Embedder – let visitors read files without downloading
bplugins
6.4
1 CVEs0 on KEV1 new
IG
Image Gallery block – Create and display photo gallery/photo album.
bPlugins
6.5
1 CVEs0 on KEV1 new
LB
LightBox Block
bPlugins
6.5
1 CVEs0 on KEV1 new
PS
Parallax Section block
bPlugins
7.1
1 CVEs0 on KEV1 new
ST
StreamCast
bPlugins
7.2
1 CVEs0 on KEV1 new
SV
Super Video Player
bPlugins
7.2
1 CVEs0 on KEV1 new
TS
Team Section Block
bPlugins
7.1
1 CVEs0 on KEV1 new
TT
Typing Text – Give your texts many typing effects
bPlugins
6.5
1 CVEs0 on KEV1 new
VB
Video Background Block – Use video as background in the section.
bPlugins
7.1
1 CVEs0 on KEV1 new
HV
Html5 Video Player
Bplugins
9.8
6 CVEs0 on KEV0 new
IF
Icons Font Loader
Bplugins
8.8
3 CVEs0 on KEV0 new
PP
PDF Poster
bPlugins
6.1
2 CVEs0 on KEV0 new
3V
3D viewer – Embed 3D Models
bPlugins
4.3
1 CVEs0 on KEV0 new
AS
Advanced Scrollbar – Custom Scrollbar Styling and Behavior
bplugins
6.1
1 CVEs0 on KEV0 new
BE
bBlocks – Essential Gutenberg Blocks & Patterns Collection
bplugins
6.1
1 CVEs0 on KEV0 new
BB
Button Block – Design Stylish, Interactive, and Multi-Functional Buttons
bplugins
6.5
1 CVEs0 on KEV0 new
ET
Easy Twitter Feed
Bplugins
5.4
1 CVEs0 on KEV0 new
ET
Easy Twitter Feeds
bplugins
4.3
1 CVEs0 on KEV0 new
FH
Flash & HTML5 Video
bPlugins
5.8
1 CVEs0 on KEV0 new
HA
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
bplugins
6.1
1 CVEs0 on KEV0 new
MB
MailChimp Block
bPlugins
8.3
1 CVEs0 on KEV0 new
MS
My Social Feeds – Social Feeds Embedder Plugin for WordPress
bplugins
5.4
1 CVEs0 on KEV0 new
PP
PDF Poster – Display PDF Files with Custom Viewer
bplugins
6.1
1 CVEs0 on KEV0 new
PV
Polo Video Gallery
Bplugins
5.4
1 CVEs0 on KEV0 new
SS
Services Section Block – Showcase Service Details in Grid or Columns
bplugins
6.4
1 CVEs0 on KEV0 new
SR
Streamcast Radio Player
Bplugins
5.4
1 CVEs0 on KEV0 new
SF
Survey Form Block – collect answers and insights from your audience
bplugins
4.3
1 CVEs0 on KEV0 new
TF
Tiktok Feed
bPlugins
4.3
1 CVEs0 on KEV0 new
YP
YT Player
bPlugins
5.3
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109370
New
DE
Document Embedder – let visitors read files without downloading
bplugins
6.4–Oct 28Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute
CVE-2026-116613
New
AT
Animated Text Block – Add Typing and Looping Text Effects
bplugins
7.5–Oct 28Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute
CVE-2026-115966
New
TT
Typing Text – Give your texts many typing effects
bPlugins
6.5
0%
Oct 26WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-116400
New
BB
Button Block
bPlugins
6.5
0%
Oct 26WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-116398
New
CS
Content Slider Block
bPlugins
6.5
0%
Oct 26WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-116395
New
LB
LightBox Block
bPlugins
6.5
0%
Oct 26WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115955
New
AP
Advanced Post Block - Post Grid for WordPress block editor
bPlugins
6.5
0%
Oct 26WordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115956
New
PV
Panorama Viewer – 360 Degree Image + Video Viewer
bPlugins
6.5
0%
Oct 26WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115961
New
BS
B Slider
bPlugins
6.5
0%
Oct 26WordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115613
New
IG
Image Gallery block – Create and display photo gallery/photo album.
bPlugins
6.5
0%
Oct 26WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62037
DE
Document Embedder
bPlugins
7.1
0%
Oct 10WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62034
BA
Before After Image Comparison – Image comparison for WP
bPlugins
7.1
0%
Oct 10WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62030
ST
StreamCast
bPlugins
7.2
0%
Oct 10WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-62027
TS
Team Section Block
bPlugins
7.1
0%
Oct 10WordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62044
SV
Super Video Player
bPlugins
7.2
0%
Oct 10WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability
CVE-2026-62028
BA
Before After Image Comparison – Image comparison for WP
bPlugins
5.4
0%
Oct 9WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Broken Access Control vulnerability
CVE-2026-62039
HA
Html5 Audio Player
bPlugins
6.5
0%
Oct 9WordPress Html5 Audio Player plugin <= 2.8.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42634
VB
Video Background Block – Use video as background in the section.
bPlugins
7.1
0%
Oct 6WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-104400
BB
B Blocks
bPlugins
6.5
0%
Oct 5WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102378
PS
Parallax Section block
bPlugins
7.1
0%
Oct 1WordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-5626
SF
Survey Form Block – collect answers and insights from your audience
bplugins
4.3
0%
Jul 29Survey Form Block <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission Data Export
CVE-2026-27422
YP
YT Player
bPlugins
5.3
0%
Jul 23WordPress YT Player plugin <= 2.1.2 - Broken Access Control vulnerability
CVE-2026-57647
PV
Panorama Viewer – 360 Degree Image + Video Viewer
bPlugins
7.5
0%
Jun 26WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability
CVE-2026-57323
FH
Flash & HTML5 Video
bPlugins
5.8
0%
Jun 26WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerability
CVE-2026-56063
MB
MailChimp Block
bPlugins
8.3
0%
Jun 26WordPress MailChimp Block plugin <= 1.1.15 - Broken Access Control vulnerability
CVE-2026-11402
SS
Services Section Block – Showcase Service Details in Grid or Columns
bplugins
6.4
0%
Jun 18Services Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block Attribute
CVE-2026-39579
BB
B Blocks
bPlugins
8.8
0%
Jun 15WordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerability
CVE-2026-53736
ET
Easy Twitter Feeds
bplugins
4.3
0%
Jun 10Easy Twitter Feeds before 1.2.13 Cross-Site Request Forgery via duplicate_post Action
CVE-2026-24520
TF
Tiktok Feed
bPlugins
4.3
0%
May 26WordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerability
CVE-2026-27416
PP
PDF Poster
bPlugins
5.3
0%
May 7WordPress PDF Poster plugin <= 2.4.1 - Broken Access Control vulnerability
CVE-2026-6446
MS
My Social Feeds – Social Feeds Embedder Plugin for WordPress
bplugins
5.4
0%
May 2My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action
CVE-2024-13362
AS
Advanced Scrollbar – Custom Scrollbar Styling and Behavior
bplugins
6.1
0%
May 1Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2026-40729
3V
3D viewer – Embed 3D Models
bPlugins
4.3
0%
Apr 15WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerability
CVE-2025-22787
BB
Button Block
Bplugins
8.8
0%
Jan 15Missing Authorization vulnerability in bPlugins Button Block button-block allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Button Block: from n/a…
CVE-2025-22815
BB
Button Block
bPlugins
5.4
0%
Jan 9WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability
CVE-2024-12560
BB
Button Block – Design Stylish, Interactive, and Multi-Functional Buttons
bplugins
6.5
0%
Dec 19Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
CVE-2024-10671
BB
Button Block
Bplugins
6.5
1%
Nov 21The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.4 via the…
CVE-2024-43296
HV
Html5 Video Player
Bplugins
8.8
0%
Nov 1Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flash & HTML5…
CVE-2024-7727
HV
Html5 Video Player
Bplugins
5.3
0%
Sep 11The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple…
CVE-2024-7721
HV
Html5 Video Player
Bplugins
4.3
0%
Sep 11The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the…
CVE-2024-37445
HA
Html5 Audio Player
Bplugins
5.4
0%
Jul 22Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player allows Stored XSS.This issue affects Html5…
CVE-2024-5522
HV
Html5 Video Player
Bplugins
6.5
3%
Jun 20The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement, allowing unauthenticated…
CVE-2024-24714
IF
Icons Font Loader
Bplugins
7.2
1%
Feb 26Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons Font Loader: from n/a through 1.1.4
CVE-2024-23508
PP
Pdf Poster
Bplugins
6.1
0%
Jan 31Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poster – PDF Embedder Plugin for WordPress allows Reflected…
CVE-2024-1061
HV
Html5 Video Player
Bplugins
9.8
11%
Jan 30The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in the  'get_view' function
CVE-2023-6485
HV
Html5 Video Player
Bplugins
5.4
1%
Jan 1The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin…
CVE-2023-46084
IF
Icons Font Loader
Bplugins
8.8
1%
Nov 6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bPlugins LLC Icons Font Loader allows SQL Injection.This issue affects Icons…
CVE-2023-5860
IF
Icons Font Loader
Bplugins
7.2
1%
Nov 2The Icons Font Loader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload function in all versions up to, and including,…
CVE-2023-0170
HA
Html5 Audio Player
Bplugins
5.4
1%
Feb 6The Html5 Audio Player WordPress plugin before 2.1.12 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode…
CVE-2021-24868
DE
Document Embedder
Bplugins
4.3
1%
Feb 1The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of…
CVE-2021-24775
DE
Document Embedder
Bplugins
5.3
1%
Feb 1The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts
CVE-2021-24416
SR
Streamcast Radio Player
Bplugins
5.4
1%
Oct 18The StreamCast – Radio Player for WordPress plugin before 2.1.1 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor…
CVE-2021-24415
PV
Polo Video Gallery
Bplugins
5.4
1%
Oct 18The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a…
CVE-2021-24413
ET
Easy Twitter Feed
Bplugins
5.4
1%
Oct 18The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set…
CVE-2021-24412
HA
Html5 Audio Player
Bplugins
5.4
1%
Oct 18The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as…