Read the docs

bPlugins

Records124All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high27CVSS 7.0–8.9

Exploited now

bPlugins records in CISA KEV

No bPlugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Html5 Video Player 6 records MEDIUM Button Block 4 records LOW Html5 Audio Player 3 records MEDIUM Icons Font Loader 3 records MEDIUM Document Embedder 2 records LOW Easy Twitter Feed 1 record LOW Pdf Poster 1 record LOW Polo Video Gallery 1 record LOW

Records

1 record in Easy Twitter Feed · all components

TI-2021-06705 CVE-2021-24413 · GHSA-hx6c-g4wq-3xwx

Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will b…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0065 Published 2021-10-18 Fixed in 1.2 CWE-79
Open these records in search →