Advisories · Technology

bPlugins Button Block.

Every CVE that names bPlugins Button Block among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116400 CVE record

CVSS 6.5 Medium

WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability
- bPlugins Button Block
- Cross-site scripting (XSS)
Not analysed yet 26 Oct 2026
CVE-2025-54694 CVE record

CVSS 4.3 Medium

WordPress Button Block Plugin plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) Vulnerability
- bPlugins Button Block
- Cross-site request forgery (CSRF)
Not analysed yet 14 Aug 2025
CVE-2025-22787 CVE record

CVSS 4.3 Medium

WordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerability
- bPlugins Button Block
- Broken access control
Not analysed yet 15 Jan 2025
CVE-2025-22815 CVE record

CVSS 6.5 Medium

WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability
- bPlugins Button Block
- Cross-site scripting (XSS)
Not analysed yet 9 Jan 2025