bplugins
Web & CMS Pluginscommercial
Latest CVEs
The 15 most recently published vulnerabilities affecting bplugins.
- CVE-2026-5626Survey Form Block <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission Data Export4.3
- CVE-2026-27422WordPress YT Player plugin <= 2.0.9 - Broken Access Control vulnerability5.3
- CVE-2026-57647WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability7.5
- CVE-2026-57323WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerability5.8
- CVE-2026-56063WordPress MailChimp Block plugin <= 1.1.15 - Broken Access Control vulnerability8.3
- CVE-2026-11402Services Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block Attribute6.4
- CVE-2026-39579WordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerability8.8
- CVE-2026-53736Easy Twitter Feeds before 1.2.13 Cross-Site Request Forgery via duplicate_post Action4.3
- CVE-2026-24520WordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerability4.3
- CVE-2026-27416WordPress PDF Poster plugin <= 2.4.1 - Broken Access Control vulnerability5.3
- CVE-2026-6446My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action5.4
- CVE-2024-13362Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter6.1
- CVE-2026-40729WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerability4.3
- CVE-2026-32489WordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerability6.5
- CVE-2026-4120Info Cards <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes6.4