目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡

bplugins 厂商漏洞列表 / CVE 中文分析 73

bplugins 厂商相关 73 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

bplugins 是一款面向 WordPress 的插件开发框架，旨在简化插件构建流程。截至最新统计，该框架已关联 72 条 CVE 漏洞。历史漏洞主要集中在远程代码执行、跨站脚本及权限绕过等高危类型，部分源于对输入验证和输出转义的疏忽。尽管其提升了开发效率，但底层安全机制的缺陷导致多次被利用，建议使用者严格审查依赖版本并及时更新，以规避潜在的系统入侵风险。

Top products by bplugins: bSlider – Create Responsive Image, Post, Product, and Video Sliders B Blocks Button Block HTML5 Video Player – Embed and Play Videos in Custom Player Document Embedder – Embed PDFs, Word, Excel, and Other Files Info Cards Button Block – Design Stylish, Interactive, and Multi-Functional Buttons Icon List Block Tiktok Feed B Slider Html5 Audio Player HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player PDF Poster bBlocks – Essential Gutenberg Blocks & Patterns Collection LightBox Block Media Player Addons for Elementor – Audio and Video Widgets for Elementor Block for Mailchimp – Add Email Subscription Forms and Collect Leads Voice Feedback Video Gallery Block Advanced scrollbar Carousel Block – Responsive Image and Content Carousel Image Gallery block – Create and display photo gallery/photo album. Counters Block Icon List Block – Add Icon-Based Lists with Custom Styles Parallax Section block Team Section Block – Showcase Team Members with Layout Options B Accordion All In One Image Viewer Block – Gutenberg block to create image viewer with hyperlink Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) Info Cards – Add Text and Media in Card Layouts
CVE ID标题CVSS风险等级Published
CVE-2025-54694 WordPress plugin Button Block 跨站请求伪造漏洞 — Button BlockCWE-352 4.3 Medium2025-08-14
CVE-2025-8418 WordPress plugin B Slider- Gutenberg Slider Block for WP 安全漏洞 — bSlider – Create Responsive Image, Post, Product, and Video SlidersCWE-862 8.8 High2025-08-12
CVE-2025-8059 WordPress plugin B Blocks 安全漏洞 — bBlocks – Essential Gutenberg Blocks & Patterns CollectionCWE-862 9.8 Critical2025-08-12
CVE-2025-54051 WordPress plugin LightBox Block 跨站脚本漏洞 — LightBox BlockCWE-79 6.5 Medium2025-07-16
CVE-2025-27326 WordPress plugin Video Gallery Block 跨站脚本漏洞 — Video Gallery BlockCWE-79 6.5 Medium2025-07-04
CVE-2025-2579 WordPress plugin Lottie Player 跨站脚本漏洞 — Lottie Player – Add Interactive Lottie Animations with Block SupportCWE-79 6.4 Medium2025-04-24
CVE-2025-39524 WordPress plugin Html5 Audio Player 安全漏洞 — Html5 Audio PlayerCWE-80 6.5 Medium2025-04-16
CVE-2025-32173 WordPress plugin B Blocks - The ultimate block collection 跨站脚本漏洞 — B BlocksCWE-79 6.5 Medium2025-04-04
CVE-2024-13731 WordPress plugin Alert Box Block 跨站脚本漏洞 — Alert Box Block – Display Custom Alerts and MessagesCWE-79 6.4 Medium2025-03-25
CVE-2025-26952 WordPress plugin Business Card Block 跨站脚本漏洞 — Business Card BlockCWE-79 6.5 Medium2025-02-25
CVE-2025-26949 WordPress plugin Team Section Block 跨站脚本漏洞 — Team Section BlockCWE-79 6.5 Medium2025-02-25
CVE-2025-26947 WordPress plugin Services Section block 跨站脚本漏洞 — Services Section blockCWE-79 6.5 Medium2025-02-25
CVE-2025-26939 WordPress plugin Counters Block 跨站脚本漏洞 — Counters BlockCWE-79 6.5 Medium2025-02-25
CVE-2025-26945 WordPress plugin Info Cards 跨站脚本漏洞 — Info CardsCWE-79 6.5 Medium2025-02-25
CVE-2025-26937 WordPress plugin Icon List Block 跨站脚本漏洞 — Icon List BlockCWE-79 6.5 Medium2025-02-25
CVE-2025-26938 WordPress plugin Countdown Timer 跨站脚本漏洞 — Countdown TimerCWE-79 6.5 Medium2025-02-25
CVE-2025-26881 WordPress plugin Sticky Content 跨站脚本漏洞 — Sticky ContentCWE-79 6.5 Medium2025-02-25
CVE-2025-26883 WordPress plugin Animated Text Block 安全漏洞 — Animated Text BlockCWE-862 6.5 Medium2025-02-24
CVE-2025-26754 WordPress plugin Timeline Block 跨站脚本漏洞 — Timeline BlockCWE-79 6.5 Medium2025-02-17
CVE-2025-22675 WordPress plugin Alert Box Block 跨站脚本漏洞 — Alert Box Block – Display notice/alerts in the front endCWE-79 6.5 Medium2025-02-04
CVE-2024-13514 WordPress plugin B Slider- Gutenberg Slider Block for WP 访问控制错误漏洞 — bSlider – Create Responsive Image, Post, Product, and Video SlidersCWE-284 4.3 Medium2025-02-04
CVE-2025-24595 WordPress plugin All Embed – Elementor Addons 跨站脚本漏洞 — All Embed – Elementor AddonsCWE-79 6.5 Medium2025-01-24
CVE-2025-22787 WordPress plugin Button Block 安全漏洞 — Button BlockCWE-862 4.3 Medium2025-01-15
CVE-2024-13156 WordPress plugin HTML5 Video Player 跨站脚本漏洞 — HTML5 Video Player – Embed and Play Videos in Custom PlayerCWE-79 6.4 Medium2025-01-14
CVE-2025-22815 WordPress plugin Button Block 跨站脚本漏洞 — Button BlockCWE-79 6.5 Medium2025-01-09
CVE-2024-12560 WordPress plugin Button Block 信息泄露漏洞 — Button Block – Design Stylish, Interactive, and Multi-Functional ButtonsCWE-200 4.3 Medium2024-12-19
CVE-2024-11882 WordPress plugin FAQ And Answers 跨站脚本漏洞 — Awesome FAQ – Modern Accordion, Tabs,Responsive & Super Fast FAQ Builder.CWE-79 6.4 Medium2024-12-12
CVE-2024-11880 WordPress plugin B Testimonial 跨站脚本漏洞 — B Testimonial – Customer Testimonials in Custom LayoutsCWE-79 6.4 Medium2024-12-04
CVE-2024-10666 WordPress plugin Easy Twitter Feed 安全漏洞 — Feeds for Twitter – Embed Social Media Posts with Live UpdatesCWE-639 4.3 Medium2024-11-22
CVE-2024-10671 WordPress plugin Button Block 安全漏洞 — Button Block – Design Stylish, Interactive, and Multi-Functional ButtonsCWE-639 4.3 Medium2024-11-21

本页汇总了 bplugins 厂商截至目前公开的全部 73 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。