Browse CVEs

HIGH 8.8 CVE-2025-22787 Missing Authorization vulnerability in bPlugins Button Block button-block allows Accessing Functionality Not Properly Constrained by ACLs.This issue … Button Block 1.1.6+ Fix from $1,9502025-01-15 MEDIUM 5.4 CVE-2025-22815 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block allows Store… Button Block 1.1.7+ Fix from $1,6002025-01-09 MEDIUM 6.5 CVE-2024-12560 The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all vers… Button Block 1.1.6+ Fix from $1,6002024-12-19 MEDIUM 6.5 CVE-2024-10671 The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Information Exposure in all versions up to… Button Block 1.1.5+ Fix from $1,6002024-11-21 HIGH 8.8 CVE-2024-43296 Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This … Html5 Video Player 2.5.31+ Fix from $1,9502024-11-01 MEDIUM 5.3 CVE-2024-7727 The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabil… Html5 Video Player 2.5.33+ Fix from $1,6002024-09-11 MEDIUM 5.4 CVE-2024-37445 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player allows Store… Html5 Audio Player 2.2.24+ Fix from $1,6002024-07-22 MEDIUM 6.5 CVE-2024-5522 The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement,… Html5 Video Player 2.5.27+ Fix from $1,6002024-06-20 HIGH 7.2 CVE-2024-24714 Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons Font Loader: from n/a throug… Icons Font Loader 1.1.5+ Fix from $1,9502024-02-26 MEDIUM 6.1 CVE-2024-23508 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poster – PDF Embedder Plugin for W… Pdf Poster 2.1.18+ Fix from $1,6002024-01-31 CRITICAL 9.8 CVE-2024-1061EPSS 11% The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in th… Html5 Video Player 2.5.25+ Fix from $2,3002024-01-30 MEDIUM 5.4 CVE-2023-6485 The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capabilit… Html5 Video Player 2.5.19+ Fix from $1,6002024-01-01 HIGH 8.8 CVE-2023-46084 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bPlugins LLC Icons Font Loader allows SQL Injec… Icons Font Loader after 1.1.2 Fix from $1,9502023-11-06 HIGH 7.2 CVE-2023-5860 The Icons Font Loader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload function in all … Icons Font Loader 1.1.3+ Fix from $1,9502023-11-02 MEDIUM 5.4 CVE-2023-0170 The Html5 Audio Player WordPress plugin before 2.1.12 does not validate and escape some of its shortcode attributes before outputting them back in a … Html5 Audio Player 2.1.12+ Fix from $1,6002023-02-06 MEDIUM 5.3 CVE-2021-24775 The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbit… Document Embedder 1.7.5+ Fix from $1,6002022-02-01 MEDIUM 5.4 CVE-2021-24412 The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing use… Html5 Audio Player 2.1.3+ Fix from $1,6002021-10-18 MEDIUM 5.4 CVE-2021-24413 The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low … Easy Twitter Feed 1.2+ Fix from $1,6002021-10-18 MEDIUM 5.4 CVE-2021-24415 The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its short… Polo Video Gallery after 1.2 Fix from $1,6002021-10-18 MEDIUM 5.4 CVE-2021-24416 The StreamCast – Radio Player for WordPress plugin before 2.1.1 does not sanitise or validate the parameters from its shortcode, allowing users with … Streamcast Radio Player 2.1.1+ Fix from $1,6002021-10-18