Vulnerabilidades de bPlugins LLC (CVE)

Registros CVE publicados para bPlugins LLC, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

B Blocks 5Flash & HTML5 Video 5bSlider – Create Responsive Image, Post, Product, and Video Sliders 4Button Block 4B Slider 3PDF Poster 3Html5 Audio Player 3HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 3Tiktok Feed 3HTML5 Video Player – Embed and Play Videos in Custom Player 3StreamCast 3Button Block – Design Stylish, Interactive, and Multi-Functional Buttons 2Image Gallery block – Create and display photo gallery/photo album. 2Panorama Viewer – 360 Degree Image + Video Viewer 2Info Cards 2Parallax Section block 2Team Section Block 2LightBox Block 2bBlocks – Essential Gutenberg Blocks & Patterns Collection 2html5_video_player 2Before After Image Comparison – Image comparison for WP 2Icon List Block 2Document Embedder – Embed PDFs, Word, Excel, and Other Files 2Icons Font Loader 2Video Gallery Block 2Panorama – 360 Virtual Tour, Panoramic image viewer and More 1Advanced Post Block – Showcase Posts with Grid, List, Card Layouts and Filters 1Super Video Player 1Easy Twitter Feeds 1Voice Feedback 1Carousel Block – Responsive Image and Content Carousel 1Advanced scrollbar 1Super Video player – Fully Customizable Video Player with Playlist 1Feeds for Twitter – Embed Social Media Posts with Live Updates 1YT Player 1Content Slider Block 1Advanced Scrollbar – Custom Scrollbar Styling and Behavior 1Survey Form Block – collect answers and insights from your audience 1Info Cards – Add Text and Media in Card Layouts 1B Slider - Slider for your block editor 1
116 resultados
6.5Media
CVE-2026-119365

WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

bPlugins Media Player Addons for Elementor – Media Player widget for WP

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Player Addons for Elementor – Media Player widget for WP media-player-addons-for-elementor allows Stored XSS.This issue affects Media Player A…

6.4Media
CVE-2026-109370

Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute

bplugins Document Embedder – let visitors read files without downloading

The Document Embedder – let visitors read files without downloading plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'content (post_content containing block JSON documentSource.doc)' parameter in all versions up to, and incl…

7.5Alta
CVE-2026-116613

Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute

bplugins Animated Text Block – Add Typing and Looping Text Effects

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atb_shortcode_handler() function fetching an arbitrary post by attacker-…

6.5Media
CVE-2026-115613

WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

bPlugins Image Gallery block – Create and display photo gallery/photo album.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album. 3d-image-gallery allows Stored XSS.This issue affects Image Gallery block – Crea…