bPlugins

Records124All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high27CVSS 7.0–8.9

Exploited now

bPlugins records in CISA KEV

No bPlugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Html5 Video Player 6 records MEDIUM Button Block 4 records LOW Html5 Audio Player 3 records MEDIUM Icons Font Loader 3 records MEDIUM Document Embedder 2 records LOW Easy Twitter Feed 1 record LOW Pdf Poster 1 record LOW Polo Video Gallery 1 record LOW

Records

2 records in Document Embedder · all components

TI-2021-07057 CVE-2021-24775 · GHSA-q5pv-qhpq-3f39

Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure

LOW 27

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01327 Published 2022-02-01 No fix listed CWE-668

TI-2021-07150 CVE-2021-24868 · GHSA-2vc5-r994-6g7m

Document Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure

LOW 22

The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00891 Published 2022-02-01 No fix listed CWE-668

Open these records in search →

Critical	2
High	27
Medium	95
Low	0
No CVSS	0