Advisories · Technology

bPlugins B Blocks.

Every CVE that names bPlugins B Blocks among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-125451 CVE record

CVSS 6.5 Medium

WordPress B Blocks plugin <= 2.1.15 - Cross Site Scripting (XSS) vulnerability
- bPlugins B Blocks
- Cross-site scripting (XSS)
Not analysed yet 11 Nov 2026
CVE-2026-104400 CVE record

CVSS 6.5 Medium

WordPress B Blocks plugin <= 2.1.8 - Cross Site Scripting (XSS) vulnerability
- bPlugins B Blocks
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2026
CVE-2026-39579 CVE record

CVSS 8.8 High

WordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerability
- bPlugins B Blocks
- Privilege escalation
Not analysed yet 15 Jun 2026
CVE-2026-32489 CVE record

CVSS 6.5 Medium

WordPress B Blocks plugin < 2.0.30 - Broken Access Control vulnerability
- bPlugins B Blocks
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2025-54708 CVE record

CVSS 6.5 Medium

WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability
- bPlugins B Blocks
- Cross-site scripting (XSS)
Not analysed yet 14 Aug 2025
CVE-2025-32173 CVE record

CVSS 6.5 Medium

WordPress B Blocks plugin <= 2.0.0 - Stored Cross Site Scripting (XSS) vulnerability
- bPlugins B Blocks
- Cross-site scripting (XSS)
Not analysed yet 4 Apr 2025