Read the docs

bPlugins

Records124All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

bPlugins records in CISA KEV

No bPlugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Html5 Video Player 6 records MEDIUM Button Block 4 records LOW Html5 Audio Player 3 records MEDIUM Icons Font Loader 3 records MEDIUM Document Embedder 2 records LOW Easy Twitter Feed 1 record LOW Pdf Poster 1 record LOW Polo Video Gallery 1 record LOW

Records

4 records in Button Block · all components

TI-2025-16668 CVE-2025-22787 · GHSA-xgr3-26hm-39gg

WordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in bPlugins Button Block button-block allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Button Block: from n/a through <= 1.1.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00317 Published 2025-01-15 No fix listed CWE-862
TI-2024-11654 CVE-2024-12560 · GHSA-87qx-mgq2-gx6h

Information disclosure in bPlugins Button Block – Design Stylish, Interactive, and…

Priority LOW 29

The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.5 via the 'btn_block_duplicate_post' fun…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00367 Published 2024-12-19 No fix listed CWE-200
TI-2024-09889 CVE-2024-10671

Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure

Priority LOW 29

The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.4 via the [btn_block] shortcode due to insufficien…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00513 Published 2024-11-21 No fix listed CWE-639
TI-2025-16696 CVE-2025-22815 · GHSA-f6qv-3f59-g6g6

WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block allows Stored XSS.This issue affects Button Block: from n/a through <= 1.1.9.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00217 Published 2025-01-09 No fix listed CWE-79
Open these records in search →