Button Block (Bplugins) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 18 known versions, newest CVE from 2026-10-26. Vendor: Bplugins.

CVEs of Button Block

• CVE-2026-116400 - CVSS 6.5 (medium), 2026-10-26: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block allows Stored…
• CVE-2025-54694 - CVSS 4.3 (medium), 2025-08-14: Cross-Site Request Forgery (CSRF) vulnerability in bPlugins Button Block button-block allows Cross Site Request Forgery.This issue affects Button Block: from…
• CVE-2025-22787 - CVSS 8.8 (high), 2025-01-15: Missing Authorization vulnerability in bPlugins Button Block button-block allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects…
• CVE-2025-22815 - CVSS 6.5 (medium), 2025-01-09: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block allows Stored…
• CVE-2024-12560 - CVSS 6.5 (medium), 2024-12-19: The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up…
• CVE-2024-10671 - CVSS 6.5 (medium), 2024-11-21: The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and…