bPlugins LLC güvenlik açıkları (CVE)

bPlugins LLC için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

B Blocks 5Flash & HTML5 Video 5bSlider – Create Responsive Image, Post, Product, and Video Sliders 4Button Block 4PDF Poster 3Html5 Audio Player 3HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 3Tiktok Feed 3HTML5 Video Player – Embed and Play Videos in Custom Player 3StreamCast 3B Slider 3Team Section Block 2LightBox Block 2bBlocks – Essential Gutenberg Blocks & Patterns Collection 2html5_video_player 2Before After Image Comparison – Image comparison for WP 2Icon List Block 2Document Embedder – Embed PDFs, Word, Excel, and Other Files 2Icons Font Loader 2Video Gallery Block 2Button Block – Design Stylish, Interactive, and Multi-Functional Buttons 2Image Gallery block – Create and display photo gallery/photo album. 2Panorama Viewer – 360 Degree Image + Video Viewer 2Info Cards 2Parallax Section block 2Info Cards – Add Text and Media in Card Layouts 1B Slider - Slider for your block editor 1YT Player – Embed and Customize Video Players 1Content Slider Block – Slide Through Text or Media Content 1Alert Box Block – Display Custom Alerts and Messages 1B Testimonial – Customer Testimonials in Custom Layouts 1PDF Poster – Display PDF Files with Custom Viewer 1Countdown Timer 1Alert Box Block – Display notice/alerts in the front end 1Team Section Block – Showcase Team Members with Layout Options 1Logo Carousel – Clients logo carousel for WP 1PDF Poster – PDF Embedder Plugin for WordPress 1Countdown Timer Block – Animated Countdown for Events or Launches 1All Embed – Elementor Addons 1Lottie Player – Add Interactive Lottie Animations with Block Support 1
116 sonuç
6.5Orta
CVE-2026-119365

WordPress Media Player Addons for Elementor – Media Player widget for WP plugin <= 1.1.10 - Cross Site Scripting (XSS) vulnerability

bPlugins Media Player Addons for Elementor – Media Player widget for WP

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Media Player Addons for Elementor – Media Player widget for WP media-player-addons-for-elementor allows Stored XSS.This issue affects Media Player A…

6.4Orta
CVE-2026-109370

Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute

bplugins Document Embedder – let visitors read files without downloading

The Document Embedder – let visitors read files without downloading plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'content (post_content containing block JSON documentSource.doc)' parameter in all versions up to, and incl…

7.5Yüksek
CVE-2026-116613

Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute

bplugins Animated Text Block – Add Typing and Looping Text Effects

The Animated Text Block plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.2.6 via the 'animated-text' shortcode. This is due to the atb_shortcode_handler() function fetching an arbitrary post by attacker-…

6.5Orta
CVE-2026-115613

WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability

bPlugins Image Gallery block – Create and display photo gallery/photo album.

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Image Gallery block – Create and display photo gallery/photo album. 3d-image-gallery allows Stored XSS.This issue affects Image Gallery block – Crea…