Known Vulnerabilities for products from Bplugins

Listed below are 8 of the newest known vulnerabilities associated with the vendor "Bplugins".

These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.

Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-32489 Not Provided 2026-03-25 2026-03-26
CVE-2026-24565 Not Provided 2026-01-23 2026-04-01
CVE-2025-66110 Not Provided 2025-11-21 2026-04-01
CVE-2025-54734 Not Provided 2025-08-28 2026-04-01
CVE-2025-54710 Not Provided 2025-08-28 2026-04-01
CVE-2025-54708 Not Provided 2025-08-14 2026-04-01
CVE-2025-54694 Not Provided 2025-08-14 2026-04-01
CVE-2025-54051 Not Provided 2025-07-16 2026-04-01
CVE-2025-39524 Not Provided 2025-04-16 2026-04-01
CVE-2025-32173 Not Provided 2025-04-04 2026-04-01
CVE-2025-22815 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block b... Not Provided 2025-01-09 2026-04-01
CVE-2025-22787 Missing Authorization vulnerability in bPlugins Button Block button-block allows Accessing Functionality Not Properly Constra... Not Provided 2025-01-15 2026-04-01
CVE-2021-24868 The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user... 4.3 - MEDIUM 2022-02-01 2022-02-04
CVE-2021-24775 The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enum... 5.3 - MEDIUM 2022-02-01 2022-02-04
CVE-2021-24416 The StreamCast – Radio Player for WordPress plugin before 2.1.1 does not sanitise or validate the parameters from its short... 5.4 - MEDIUM 2021-10-18 2023-11-07
CVE-2021-24415 The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the... 5.4 - MEDIUM 2021-10-18 2023-11-07
CVE-2021-24413 The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing u... 5.4 - MEDIUM 2021-10-18 2021-10-21
CVE-2021-24412 The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from i... 5.4 - MEDIUM 2021-10-18 2023-11-07