Vendor

    bPlugins

    115 known vulnerabilities in products by bPlugins, 0 of them actively exploited (CISA KEV).

    Key figures

    115

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in bPlugins
    CriticalCVE-2024-1061

    Html5-video-player: SQL Injection

    		8.6
    MediumCVE-2024-5522

    HTML5 Video Player < 2.5.27 - Unauthenticated SQLi

    		6.5
    HighCVE-2025-8418

    Missing Authorization (CVE-2025-8418)

    		8.8
    CriticalCVE-2025-8059

    bPlugins bBlocks: Missing Authorization

    		9.8
    HighCVE-2023-5860

    Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload

    		7.2
    HighCVE-2026-62044

    WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability

    		7.2
    HighCVE-2026-57647

    bPlugins Panorama Viewer: PHP Remote File Inclusion

    		7.5
    HighCVE-2023-46084

    WordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL Injection

    		8.5
    HighCVE-2026-42634

    Cross-site Scripting (CVE-2026-42634)

    		7.1
    MediumCVE-2021-24775

    Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure

    		5.3
    HighCVE-2026-62030

    WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability

    		7.2
    HighCVE-2026-39579

    WordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerability

    		8.8
    HighCVE-2026-62037

    WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-62034

    Cross-site Scripting (CVE-2026-62034)

    		7.1
    HighCVE-2026-62027

    WordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-102378

    WordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2026-56063

    WordPress MailChimp Block plugin <= 1.1.15 - Broken Access Control vulnerability

    		8.3
    MediumCVE-2026-115613

    Cross-site Scripting (CVE-2026-115613)

    		6.5
    HighCVE-2025-62007

    WordPress Voice Feedback plugin <= 1.0.3 - Privilege Escalation vulnerability

    		8.8
    MediumCVE-2026-104400

    WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability

    		6.5
    HighCVE-2025-49900

    WordPress Advanced scrollbar plugin <= 1.1.8 - Privilege Escalation vulnerability

    		8.8
    MediumCVE-2026-62039

    WordPress Html5 Audio Player plugin <= 2.8.8 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-115966

    bPlugins Typing Text: Cross-site Scripting

    		6.5
    MediumCVE-2026-116400

    WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-116398

    WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability

    		6.5

    All vulnerabilities in search

    Products

    Products by bPlugins
    Button Block80
    Html5 Audio Player60
    HTML5 Video Player60
    B Blocks50
    Bslider – Create Responsive Image, Post, Product, And Video Sliders40
    bPlugins Document Embedder30
    bPlugins Icons Font Loader30
    B Slider30
    Html5 Audio Player – The Ultimate No-code Podcast, Mp3 & Audio Player30
    Html5 Video Player – Embed And Play Videos In Custom Player30
    PDF Poster30
    Tiktok Feed30