bplugins vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 202418
3. 202542
4. 202648

Newest CVEs

• CVE-2026-119365

  WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

  bPlugins · Media Player Addons for Elementor – Media Player widget for WP

  Medium6.5
• CVE-2026-118097

  WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability

  bPlugins · Flash & HTML5 Video

  Medium6.5
• CVE-2026-116849

  WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability

  bPlugins · StreamCast

  Medium6.5
• CVE-2026-48195

  WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability

  bPlugins · PDF Poster

  Medium6.5
• CVE-2026-52709

  WordPress Video Gallery Block plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

  bPlugins · Video Gallery Block

  Medium6.5
• CVE-2026-109370

  Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute

  bplugins · Document Embedder – let visitors read files without downloading

  Medium6.4
• CVE-2026-116613

  Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute

  bplugins · Animated Text Block – Add Typing and Looping Text Effects

  High7.5
• CVE-2026-115966

  WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

  bPlugins · Typing Text – Give your texts many typing effects

  Medium6.5
• CVE-2026-116400

  WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability

  bPlugins · Button Block

  Medium6.5
• CVE-2026-116398

  WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability

  bPlugins · Content Slider Block

  Medium6.5