Button Block vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

BB

Product

Button Block

by bPlugins · last CVE Oct 26, 2026

6

CVEs

0

On KEV

8.8

Max CVSS

1

New 30D

Vulnerabilities6 In the news0 Timeline

Severity mix

Critical 0High 1Medium 5Low 0

Severity

All severities6 Critical0 High1 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Button Block to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-22787	8.8	0%	Jan 15	WordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerability Affected: through 1.1.5
CVE-2026-116400 New	6.5	0%	Oct 26	WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability Affected: through 1.2.7
CVE-2024-12560	6.5	0%	Dec 19	Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication Affected: before 1.1.6
CVE-2024-10671	6.5	1%	Nov 21	Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure Affected: before 1.1.5
CVE-2025-22815	5.4	0%	Jan 9	WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability Affected: through 1.1.9
CVE-2025-54694	4.3	0%	Aug 14	WordPress Button Block Plugin plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) Vulnerability Affected: through 1.2.0