İçeriğe atla
Noroxi

bPlugins kayıtları

bplugins üreticisine ait 22 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
0
Düzeltme kaydı olan
%45,5
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 21
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

22 kayıt
  • CVE-2024-1061
    42Planlayın

    The 'HTML5 Video Player' WordPress Plugin, version < 2.5.25 is affected by an unauthenticated SQL injection vulnerability in the 'id' parame

    KritikCVSS 9,8Kavram kanıtıEPSS %11

    bplugins · html5 video player30 Oca 2024

  • CVE-2023-46084
    35İzleyin

    WordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %1

    bplugins · icons font loader6 Kas 2023

  • CVE-2024-43296
    35İzleyin

    WordPress HTML5 Video Player plugin <= 2.5.30 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    bplugins · html5 video player1 Kas 2024

  • CVE-2025-22787
    35İzleyin

    WordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %0

    bplugins · button block15 Oca 2025

  • CVE-2023-5860
    28İzleyin

    Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload

    YüksekCVSS 7,2İstismar yokEPSS %1

    bplugins · icons font loader2 Kas 2023

  • CVE-2024-24714
    28İzleyin

    WordPress Icons Font Loader Plugin <= 1.1.4 is vulnerable to Arbitrary File Upload

    YüksekCVSS 7,2İstismar yokEPSS %1

    bplugins · icons font loader26 Şub 2024

  • CVE-2024-5522
    27İzleyin

    HTML5 Video Player < 2.5.27 - Unauthenticated SQLi

    OrtaCVSS 6,5Kavram kanıtıEPSS %3

    bplugins · html5 video player20 Haz 2024

  • CVE-2024-10671
    26İzleyin

    Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure

    OrtaCVSS 6,5İstismar yokEPSS %1

    bplugins · button block21 Kas 2024

  • CVE-2024-12560
    26İzleyin

    Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication

    OrtaCVSS 6,5İstismar yokEPSS %0

    bplugins · button block19 Ara 2024

  • CVE-2024-23508
    24İzleyin

    WordPress PDF Poster - PDF Embedder Plugin for WordPress Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1İstismar yokEPSS %0

    bplugins · pdf poster31 Oca 2024

  • CVE-2021-24775
    21İzleyin

    Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure

    OrtaCVSS 5,3İstismar yokEPSS %1

    bplugins · document embedder1 Şub 2022

  • CVE-2021-24412
    21İzleyin

    Html5 Audio Player < 2.1.3 - Contributor+ Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %1

    bplugins · html5 audio player18 Eki 2021

  • CVE-2021-24413
    21İzleyin

    Easy Twitter Feed < 1.2 - Contributor+ Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %1

    bplugins · easy twitter feed18 Eki 2021

  • CVE-2021-24416
    21İzleyin

    StreamCast < 2.1.1 - Contributor+ Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %1

    bplugins · streamcast radio player18 Eki 2021

  • CVE-2021-24415
    21İzleyin

    Polo Video Gallery <= 1.2 - Contributor+ Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %1

    bplugins · polo video gallery18 Eki 2021

  • CVE-2023-0170
    21İzleyin

    Html5 Audio Player < 2.1.12 - Contributor+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %1

    bplugins · html5 audio player6 Şub 2023

  • CVE-2023-6485
    21İzleyin

    Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS

    OrtaCVSS 5,4İstismar yokEPSS %1

    bplugins · html5 video player1 Oca 2024

  • CVE-2024-7727
    21İzleyin

    HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.32 - Missing Authorization in multiple functions via h5vp_ajax_handler

    OrtaCVSS 5,3İstismar yokEPSS %0

    bplugins · html5 video player11 Eyl 2024

  • CVE-2024-37445
    21İzleyin

    WordPress HTML5 Audio Player plugin <= 2.2.23 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    bplugins · html5 audio player22 Tem 2024

  • CVE-2025-22815
    21İzleyin

    WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    bplugins · button block9 Oca 2025

  • CVE-2021-24868
    17İzleyin

    Document Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure

    OrtaCVSS 4,3İstismar yokEPSS %1

    bplugins · document embedder1 Şub 2022

  • CVE-2024-7721
    17İzleyin

    HTML5 Video Player – mp4 Video Player Plugin and Block <= 2.5.34 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

    OrtaCVSS 4,3İstismar yokEPSS %0

    bplugins · html5 video player11 Eyl 2024