Vulnerability index

Browse CVEs

20 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Button Block HIGH 8.8
CVE-2025-22787

Missing Authorization vulnerability in bPlugins Button Block button-block allows Accessing Functionality Not Properly Constrained by ACLs.This issue …

Fix: 1.1.6+
Fix from $1,950 2025-01-15
Button Block MEDIUM 5.4
CVE-2025-22815

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block allows Store…

Fix: 1.1.7+
Fix from $1,600 2025-01-09
Button Block MEDIUM 6.5
CVE-2024-12560

The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all vers…

Fix: 1.1.6+
Fix from $1,600 2024-12-19
Button Block MEDIUM 6.5
CVE-2024-10671

The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Information Exposure in all versions up to…

Fix: 1.1.5+
Fix from $1,600 2024-11-21
Html5 Video Player HIGH 8.8
CVE-2024-43296

Missing Authorization vulnerability in bPlugins LLC Flash & HTML5 Video allows Exploiting Incorrectly Configured Access Control Security Levels.This …

Fix: 2.5.31+
Fix from $1,950 2024-11-01
Html5 Video Player MEDIUM 5.3
CVE-2024-7727

The HTML5 Video Player – mp4 Video Player Plugin and Block plugin for WordPress is vulnerable to unauthorized access of data due to a missing capabil…

Fix: 2.5.33+
Fix from $1,600 2024-09-11
Html5 Audio Player MEDIUM 5.4
CVE-2024-37445

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player allows Store…

Fix: 2.2.24+
Fix from $1,600 2024-07-22
Html5 Video Player MEDIUM 6.5
CVE-2024-5522

The HTML5 Video Player WordPress plugin before 2.5.27 does not sanitize and escape a parameter from a REST route before using it in a SQL statement,…

Fix: 2.5.27+
Fix from $1,600 2024-06-20
Icons Font Loader HIGH 7.2
CVE-2024-24714

Unrestricted Upload of File with Dangerous Type vulnerability in bPlugins LLC Icons Font Loader.This issue affects Icons Font Loader: from n/a throug…

Fix: 1.1.5+
Fix from $1,950 2024-02-26
Pdf Poster MEDIUM 6.1
CVE-2024-23508

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins PDF Poster – PDF Embedder Plugin for W…

Fix: 2.1.18+
Fix from $1,600 2024-01-31
Html5 Video Player CRITICAL 9.8
CVE-2024-1061EPSS 11%

The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parameter in th…

Fix: 2.5.25+
Fix from $2,300 2024-01-30
Html5 Video Player MEDIUM 5.4
CVE-2023-6485

The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capabilit…

Fix: 2.5.19+
Fix from $1,600 2024-01-01
Icons Font Loader HIGH 8.8
CVE-2023-46084

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bPlugins LLC Icons Font Loader allows SQL Injec…

Fix: after 1.1.2
Fix from $1,950 2023-11-06
Icons Font Loader HIGH 7.2
CVE-2023-5860

The Icons Font Loader plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload function in all …

Fix: 1.1.3+
Fix from $1,950 2023-11-02
Html5 Audio Player MEDIUM 5.4
CVE-2023-0170

The Html5 Audio Player WordPress plugin before 2.1.12 does not validate and escape some of its shortcode attributes before outputting them back in a …

Fix: 2.1.12+
Fix from $1,600 2023-02-06
Document Embedder MEDIUM 5.3
CVE-2021-24775

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbit…

Fix: 1.7.5+
Fix from $1,600 2022-02-01
Html5 Audio Player MEDIUM 5.4
CVE-2021-24412

The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing use…

Fix: 2.1.3+
Fix from $1,600 2021-10-18
Easy Twitter Feed MEDIUM 5.4
CVE-2021-24413

The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low …

Fix: 1.2+
Fix from $1,600 2021-10-18
Polo Video Gallery MEDIUM 5.4
CVE-2021-24415

The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its short…

Fix: after 1.2
Fix from $1,600 2021-10-18
Streamcast Radio Player MEDIUM 5.4
CVE-2021-24416

The StreamCast – Radio Player for WordPress plugin before 2.1.1 does not sanitise or validate the parameters from its shortcode, allowing users with …

Fix: 2.1.1+
Fix from $1,600 2021-10-18