[ Vendor · 10 CVEs ]
bPlugins
CVEs affecting bPlugins published in the last 30 days, plus any bPlugins CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-62030 | 10 Oct 2026 | CVSS 7.2 | bPlugins StreamCastUnauthenticated Server Side Request Forgery (SSRF) in StreamCast <= 2.4.5 versions. | |
| CVE-2026-62034 | 10 Oct 2026 | CVSS 7.1 | bPlugins Before After Image Comparison – Image comparison for WPUnauthenticated Cross Site Scripting (XSS) in Before After Image Comparison – Image comparison for WP <= 1.1.21 versions. | |
| CVE-2026-62037 | 10 Oct 2026 | CVSS 7.1 | bPlugins Document EmbedderUnauthenticated Cross Site Scripting (XSS) in Document Embedder <= 2.4.0 versions. | |
| CVE-2026-62027 | 10 Oct 2026 | CVSS 7.1 | bPlugins Team Section BlockUnauthenticated Cross Site Scripting (XSS) in Team Section Block <= 2.0.4 versions. | |
| CVE-2026-62044 | 10 Oct 2026 | CVSS 7.2 | bPlugins Super Video PlayerDeserialization of Untrusted Data vulnerability in bPlugins Super Video Player super-video-player allows Object Injection.This issue affects Super… | |
| CVE-2026-62028 | 9 Oct 2026 | CVSS 5.4 | bPlugins Before After Image Comparison – Image comparison for WPMissing Authorization vulnerability in bPlugins Before After Image Comparison – Image comparison for WP before-after-image-compare allows Exploiting… | |
| CVE-2026-62039 | 9 Oct 2026 | CVSS 6.5 | bPlugins Html5 Audio PlayerImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Html5 Audio Player html5-audio-player… | |
| CVE-2026-42634 | 6 Oct 2026 | CVSS 7.1 | bPlugins Video Background Block – Use video as background in the section.Unauthenticated Cross Site Scripting (XSS) in Video Background Block – Use video as background in the section. <= 2.0.3 versions. | |
| CVE-2026-104400 | 5 Oct 2026 | CVSS 6.5 | bPlugins B BlocksImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored… | |
| CVE-2026-102378 | 1 Oct 2026 | CVSS 7.1 | bPlugins Parallax Section blockUnauthenticated Cross Site Scripting (XSS) in Parallax Section block <= 2.0.4 versions. |