Login Request a demo
BP
Vendor
bPlugins
79 products with CVEs on record
128
CVEs
0
On KEV
22
New 30D
Products
BA
Before After Image Comparison – Image comparison for WP
bPlugins
7.1
2 CVEs0 on KEV2 new
BB
Button Block
bPlugins
8.8
6 CVEs0 on KEV1 new
BB
B Blocks
bPlugins
8.8
5 CVEs0 on KEV1 new
HA
Html5 Audio Player
bPlugins
6.5
5 CVEs0 on KEV1 new
PP
PDF Poster
bPlugins
6.5
4 CVEs0 on KEV1 new
BS
B Slider
bPlugins
6.5
3 CVEs0 on KEV1 new
DE
Document Embedder
bPlugins
7.1
3 CVEs0 on KEV1 new
IG
Image Gallery block – Create and display photo gallery/photo album.
bPlugins
7.1
2 CVEs0 on KEV1 new
LB
LightBox Block
bPlugins
6.5
2 CVEs0 on KEV1 new
PV
Panorama Viewer – 360 Degree Image + Video Viewer
bPlugins
7.5
2 CVEs0 on KEV1 new
PS
Parallax Section block
bPlugins
7.1
2 CVEs0 on KEV1 new
ST
StreamCast
bPlugins
7.2
2 CVEs0 on KEV1 new
TS
Team Section Block
bPlugins
7.1
2 CVEs0 on KEV1 new
VG
Video Gallery Block
bPlugins
6.5
2 CVEs0 on KEV1 new
AP
Advanced Post Block - Post Grid for WordPress block editor
bPlugins
6.5
1 CVEs0 on KEV1 new
AT
Animated Text Block – Add Typing and Looping Text Effects
bplugins
7.5
1 CVEs0 on KEV1 new
CS
Content Slider Block
bPlugins
6.5
1 CVEs0 on KEV1 new
DE
Document Embedder – let visitors read files without downloading
bplugins
6.4
1 CVEs0 on KEV1 new
SV
Super Video Player
bPlugins
7.2
1 CVEs0 on KEV1 new
TT
Typing Text – Give your texts many typing effects
bPlugins
6.5
1 CVEs0 on KEV1 new
VB
Video Background Block – Use video as background in the section.
bPlugins
7.1
1 CVEs0 on KEV1 new
HV
Html5 Video Player
Bplugins
9.8
6 CVEs0 on KEV0 new
BC
bSlider – Create Responsive Image, Post, Product, and Video Sliders
bplugins
8.8
4 CVEs0 on KEV0 new
HA
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
bplugins
7.2
3 CVEs0 on KEV0 new
HV
HTML5 Video Player – Embed and Play Videos in Custom Player
bplugins
6.4
3 CVEs0 on KEV0 new
IF
Icons Font Loader
Bplugins
8.8
3 CVEs0 on KEV0 new
TF
Tiktok Feed
bPlugins
7.1
3 CVEs0 on KEV0 new
BE
bBlocks – Essential Gutenberg Blocks & Patterns Collection
bplugins
9.8
2 CVEs0 on KEV0 new
BB
Button Block – Design Stylish, Interactive, and Multi-Functional Buttons
bplugins
6.5
2 CVEs0 on KEV0 new
DE
Document Embedder – Embed PDFs, Word, Excel, and Other Files
bplugins
8.6
2 CVEs0 on KEV0 new
IL
Icon List Block
bPlugins
6.5
2 CVEs0 on KEV0 new
IC
Info Cards
bPlugins
7.1
2 CVEs0 on KEV0 new
3V
3D viewer – Embed 3D Models
bPlugins
4.3
1 CVEs0 on KEV0 new
AP
Advanced Post Block – Showcase Posts with Grid, List, Card Layouts and Filters
bplugins
5.3
1 CVEs0 on KEV0 new
AS
Advanced scrollbar
bPlugins
8.8
1 CVEs0 on KEV0 new
AS
Advanced Scrollbar – Custom Scrollbar Styling and Behavior
bplugins
6.1
1 CVEs0 on KEV0 new
AB
Alert Box Block – Display Custom Alerts and Messages
bplugins
6.4
1 CVEs0 on KEV0 new
AB
Alert Box Block – Display notice/alerts in the front end
bPlugins
6.5
1 CVEs0 on KEV0 new
AE
All Embed – Elementor Addons
bPlugins
6.5
1 CVEs0 on KEV0 new
AI
All In One Image Viewer Block – Gutenberg block to create image viewer with hyperlink
bplugins
7.2
1 CVEs0 on KEV0 new
AT
Animated Text Block
bPlugins
6.5
1 CVEs0 on KEV0 new
AF
Awesome FAQ – Modern Accordion, Tabs,Responsive & Super Fast FAQ Builder.
bplugins
6.4
1 CVEs0 on KEV0 new
BA
B Accordion
bPlugins
6.5
1 CVEs0 on KEV0 new
BS
B Slider - Slider for your block editor
bPlugins
6.5
1 CVEs0 on KEV0 new
BT
B Testimonial – Customer Testimonials in Custom Layouts
bplugins
6.4
1 CVEs0 on KEV0 new
BF
Block for Mailchimp – Add Email Subscription Forms and Collect Leads
bplugins
4.0
1 CVEs0 on KEV0 new
BC
Business Card Block
bPlugins
6.5
1 CVEs0 on KEV0 new
CB
Carousel Block – Responsive Image and Content Carousel
bplugins
6.4
1 CVEs0 on KEV0 new
CS
Content Slider Block – Slide Through Text or Media Content
bplugins
4.3
1 CVEs0 on KEV0 new
CT
Countdown Timer
bPlugins
6.5
1 CVEs0 on KEV0 new
CT
Countdown Timer Block – Animated Countdown for Events or Launches
bplugins
4.3
1 CVEs0 on KEV0 new
CB
Counters Block
bPlugins
6.5
1 CVEs0 on KEV0 new
ET
Easy Twitter Feed
Bplugins
5.4
1 CVEs0 on KEV0 new
ET
Easy Twitter Feeds
bplugins
4.3
1 CVEs0 on KEV0 new
FF
Feeds for Twitter – Embed Social Media Posts with Live Updates
bplugins
4.3
1 CVEs0 on KEV0 new
FH
Flash & HTML5 Video
bPlugins
5.8
1 CVEs0 on KEV0 new
IL
Icon List Block – Add Icon-Based Lists with Custom Styles
bplugins
6.4
1 CVEs0 on KEV0 new
IC
Info Cards – Add Text and Media in Card Layouts
bplugins
6.4
1 CVEs0 on KEV0 new
LC
Logo Carousel – Clients logo carousel for WP
bPlugins
6.5
1 CVEs0 on KEV0 new
LP
Lottie Player – Add Interactive Lottie Animations with Block Support
bplugins
6.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-118097
New
FH
Flash & HTML5 Video
bPlugins
6.5–Oct 29WordPress Flash & HTML5 Video plugin <= 2.14.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-116849
New
ST
StreamCast
bPlugins
6.5–Oct 29WordPress StreamCast plugin <= 2.4.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-48195
New
PP
PDF Poster
bPlugins
6.5–Oct 29WordPress PDF Poster plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-52709
New
VG
Video Gallery Block
bPlugins
6.5–Oct 29WordPress Video Gallery Block plugin <= 1.6.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-109370
New
DE
Document Embedder – let visitors read files without downloading
bplugins
6.4
0%
Oct 28Document Embedder <= 2.4.0 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via 'documentSource.doc' Block Attribute
CVE-2026-116613
New
AT
Animated Text Block – Add Typing and Looping Text Effects
bplugins
7.5
0%
Oct 28Animated Text Block <= 1.2.6 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'id' Shortcode Attribute
CVE-2026-115966
New
TT
Typing Text – Give your texts many typing effects
bPlugins
6.5
0%
Oct 26WordPress Typing Text – Give your texts many typing effects plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-116400
New
BB
Button Block
bPlugins
6.5
0%
Oct 26WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-116398
New
CS
Content Slider Block
bPlugins
6.5
0%
Oct 26WordPress Content Slider Block plugin <= 3.2.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-116395
New
LB
LightBox Block
bPlugins
6.5
0%
Oct 26WordPress LightBox Block plugin <= 1.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115955
New
AP
Advanced Post Block - Post Grid for WordPress block editor
bPlugins
6.5
0%
Oct 26WordPress Advanced Post Block - Post Grid for WordPress block editor plugin <= 2.5.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115956
New
PV
Panorama Viewer – 360 Degree Image + Video Viewer
bPlugins
6.5
0%
Oct 26WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115961
New
BS
B Slider
bPlugins
6.5
0%
Oct 26WordPress B Slider plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-115613
New
IG
Image Gallery block – Create and display photo gallery/photo album.
bPlugins
6.5
0%
Oct 26WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 2.4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62037
DE
Document Embedder
bPlugins
7.1
0%
Oct 10WordPress Document Embedder plugin <= 2.4.0 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62034
BA
Before After Image Comparison – Image comparison for WP
bPlugins
7.1
0%
Oct 10WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62030
ST
StreamCast
bPlugins
7.2
0%
Oct 10WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability
CVE-2026-62027
TS
Team Section Block
bPlugins
7.1
0%
Oct 10WordPress Team Section Block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-62044
SV
Super Video Player
bPlugins
7.2
0%
Oct 10WordPress Super Video Player plugin <= 1.8.13 - PHP Object Injection vulnerability
CVE-2026-62028
BA
Before After Image Comparison – Image comparison for WP
bPlugins
5.4
0%
Oct 9WordPress Before After Image Comparison – Image comparison for WP plugin <= 1.1.21 - Broken Access Control vulnerability
CVE-2026-62039
HA
Html5 Audio Player
bPlugins
6.5
0%
Oct 9WordPress Html5 Audio Player plugin <= 2.8.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-42634
VB
Video Background Block – Use video as background in the section.
bPlugins
7.1
0%
Oct 6WordPress Video Background Block – Use video as background in the section. plugin <= 2.0.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-104400
BB
B Blocks
bPlugins
6.5
0%
Oct 5WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-102378
PS
Parallax Section block
bPlugins
7.1
0%
Oct 1WordPress Parallax Section block plugin <= 2.0.4 - Cross Site Scripting (XSS) vulnerability
CVE-2026-5626
SF
Survey Form Block – collect answers and insights from your audience
bplugins
4.3
0%
Jul 29Survey Form Block <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission Data Export
CVE-2026-27422
YP
YT Player
bPlugins
5.3
0%
Jul 23WordPress YT Player plugin <= 2.1.2 - Broken Access Control vulnerability
CVE-2026-57647
PV
Panorama Viewer – 360 Degree Image + Video Viewer
bPlugins
7.5
0%
Jun 26WordPress Panorama Viewer – 360 Degree Image + Video Viewer plugin <= 1.6.1 - Local File Inclusion vulnerability
CVE-2026-57323
FH
Flash & HTML5 Video
bPlugins
5.8
0%
Jun 26WordPress Flash & HTML5 Video plugin <= 2.11.0 - Broken Access Control vulnerability
CVE-2026-56063
MB
MailChimp Block
bPlugins
8.3
0%
Jun 26WordPress MailChimp Block plugin <= 1.1.15 - Broken Access Control vulnerability
CVE-2026-11402
SS
Services Section Block – Showcase Service Details in Grid or Columns
bplugins
6.4
0%
Jun 18Services Section Block <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'link' Block Attribute
CVE-2026-39579
BB
B Blocks
bPlugins
8.8
0%
Jun 15WordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerability
CVE-2026-53736
ET
Easy Twitter Feeds
bplugins
4.3
0%
Jun 10Easy Twitter Feeds before 1.2.13 Cross-Site Request Forgery via duplicate_post Action
CVE-2026-24520
TF
Tiktok Feed
bPlugins
4.3
0%
May 26WordPress Tiktok Feed plugin <= 1.0.24 - Broken Access Control vulnerability
CVE-2026-27416
PP
PDF Poster
bPlugins
5.3
0%
May 7WordPress PDF Poster plugin <= 2.4.1 - Broken Access Control vulnerability
CVE-2026-6446
MS
My Social Feeds – Social Feeds Embedder Plugin for WordPress
bplugins
5.4
0%
May 2My Social Feeds <= 1.0.4 - Missing Authorization to Unauthenticated Sensitive Information Exposure via 'ttp_get_accounts' AJAX Action
CVE-2024-13362
PP
PDF Poster – Display PDF Files with Custom Viewer
bplugins
6.1
0%
May 1Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
CVE-2026-40729
3V
3D viewer – Embed 3D Models
bPlugins
4.3
0%
Apr 15WordPress 3D viewer – Embed 3D Models plugin <= 1.8.5 - Broken Access Control vulnerability
CVE-2026-32489
BB
B Blocks
bPlugins
6.5
0%
Mar 25WordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerability
CVE-2026-4120
IC
Info Cards – Add Text and Media in Card Layouts
bplugins
6.4
0%
Mar 19Info Cards <= 2.0.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
CVE-2026-32416
PP
PDF Poster
bPlugins
5.4
0%
Mar 13WordPress PDF Poster plugin <= 2.4.0 - Broken Access Control vulnerability
CVE-2026-32359
IL
Icon List Block
bPlugins
6.5
0%
Mar 13WordPress Icon List Block plugin <= 1.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-1228
TB
Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines)
bplugins
4.3
0%
Feb 6Timeline Block <= 1.3.3 - Insecure Direct Object Reference to Authenticated (Author+) Private Timeline Exposure via Shortcode Attribute
CVE-2026-1294
AI
All In One Image Viewer Block – Gutenberg block to create image viewer with hyperlink
bplugins
7.2
0%
Feb 5All In One Image Viewer Block <= 1.0.2 - Unauthenticated Server-Side Request Forgery via image-proxy Endpoint
CVE-2026-1389
DE
Document Embedder – Embed PDFs, Word, Excel, and Other Files
bplugins
4.3
0%
Jan 28Document Embedder <= 2.0.4 - Insecure Direct Object Reference to Authenticated (Author+) Arbitrary Document Library Entry Deletion
CVE-2026-24565
BA
B Accordion
bPlugins
6.5
0%
Jan 23WordPress B Accordion plugin <= 2.0.2 - Sensitive Data Exposure vulnerability
CVE-2026-24383
BS
B Slider
bPlugins
6.5
0%
Jan 22WordPress B Slider plugin <= 2.0.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-0833
TS
Team Section Block – Showcase Team Members with Layout Options
bplugins
6.4
0%
Jan 17Team Section Block <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Network Link
CVE-2025-13999
HA
HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player
bplugins
7.2
0%
Dec 19HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player 2.4.0 - 2.5.1 - Unauthenticated Server-Side Request Forgery
CVE-2025-60079
PS
Parallax Section block
bPlugins
7.1
0%
Dec 18WordPress Parallax Section block plugin <= 1.0.9 - Broken Authentication vulnerability
CVE-2025-66110
TF
Tiktok Feed
bPlugins
5.3
0%
Nov 21WordPress Tiktok Feed plugin <= 1.0.23 - Broken Access Control vulnerability
CVE-2025-12376
IL
Icon List Block – Add Icon-Based Lists with Custom Styles
bplugins
6.4
0%
Nov 18Icon List Block – Add Icon-Based Lists with Custom Styles <= 1.2.1 - Authenticated (Subscriber+) Server-Side Request Forgery
CVE-2025-54711
IC
Info Cards
bPlugins
7.1
0%
Nov 6WordPress Info Cards Plugin <= 1.0.11 - Broken Access Control Vulnerability
CVE-2025-49900
AS
Advanced scrollbar
bPlugins
8.8
0%
Nov 6WordPress Advanced scrollbar plugin <= 1.1.8 - Privilege Escalation vulnerability
CVE-2025-49394
IG
Image Gallery block – Create and display photo gallery/photo album.
bPlugins
7.1
0%
Nov 6WordPress Image Gallery block – Create and display photo gallery/photo album. plugin <= 1.0.7 - Broken Authentication vulnerability
CVE-2025-12384
DE
Document Embedder – Embed PDFs, Word, Excel, and Other Files
bplugins
8.6
0%
Nov 5Document Embedder – Embed PDFs, Word, Excel, and Other Files <= 2.0.0 - Missing Authorization to Unauthenticated Document Manipulation
CVE-2025-12388
CB
Carousel Block – Responsive Image and Content Carousel
bplugins
6.4
0%
Nov 5B Carousel Block – Responsive Image and Content Carousel <= 1.1.5 - Missing Authorization to Authenticated (Subscriber+) Server-Side Request Forgery
CVE-2025-62007
VF
Voice Feedback
bPlugins
8.8
0%
Oct 22WordPress Voice Feedback plugin <= 1.0.3 - Privilege Escalation vulnerability
CVE-2025-10735
BF
Block for Mailchimp – Add Email Subscription Forms and Collect Leads
bplugins
4.0
0%
Oct 1Block For Mailchimp – Easy Mailchimp Form Integration <= 1.1.12 - Unauthenticated Blind Server-Side Request Forgery
CVE-2025-9203
MP
Media Player Addons for Elementor – Audio and Video Widgets for Elementor
bplugins
6.4
0%
Sep 17Media Player Addons for Elementor <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widget Fields
CVE-2025-54734
BS
B Slider
bPlugins
5.8
0%
Aug 28WordPress B Slider Plugin <= 1.1.30 - Broken Access Control Vulnerability