IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key

bPlugins LLC vulnerabilities (CVE)

CVE records published for bPlugins LLC, newest first. Follow to get an email when a new one appears.

B Blocks 5Flash & HTML5 Video 5bSlider – Create Responsive Image, Post, Product, and Video Sliders 4Button Block 4Tiktok Feed 3HTML5 Video Player – Embed and Play Videos in Custom Player 3StreamCast 3B Slider 3PDF Poster 3Html5 Audio Player 3HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 3html5_video_player 2Before After Image Comparison – Image comparison for WP 2Icon List Block 2Document Embedder – Embed PDFs, Word, Excel, and Other Files 2Icons Font Loader 2Video Gallery Block 2Button Block – Design Stylish, Interactive, and Multi-Functional Buttons 2Image Gallery block – Create and display photo gallery/photo album. 2Panorama Viewer – 360 Degree Image + Video Viewer 2Info Cards 2Parallax Section block 2Team Section Block 2LightBox Block 2bBlocks – Essential Gutenberg Blocks & Patterns Collection 2All Embed – Elementor Addons 1Lottie Player – Add Interactive Lottie Animations with Block Support 1Print Page block 1Counters Block 1All In One Image Viewer Block – Gutenberg block to create image viewer with hyperlink 1Timeline Block 1MailChimp Block 1Block for Mailchimp – Add Email Subscription Forms and Collect Leads 1Services Section block 1Document Embedder 1Animated Text Block 1Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) 1Media Player Addons for Elementor – Audio and Video Widgets for Elementor 1Services Section Block – Showcase Service Details in Grid or Columns 1Animated Text Block – Add Typing and Looping Text Effects 1
116 results
6.5Medium
CVE-2026-119365

WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

bPlugins Media Player Addons for Elementor – Media Player widget for WP

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Player Addons for Elementor – Media Player widget for WP media-player-addons-for-elementor allows Stored XSS.This issue affects Media Player A…

6.4Medium
CVE-2026-109370

Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute

bplugins Document Embedder – let visitors read files without downloading

The Document Embedder – let visitors read files without downloading plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'content (post_content containing block JSON documentSource.doc)' parameter in all versions up to, and incl…

7.5High
CVE-2026-116613

Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute

bplugins Animated Text Block – Add Typing and Looping Text Effects

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atb_shortcode_handler() function fetching an arbitrary post by attacker-…

6.5Medium
CVE-2026-115613

WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

bPlugins Image Gallery block – Create and display photo gallery/photo album.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album. 3d-image-gallery allows Stored XSS.This issue affects Image Gallery block – Crea…