目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

bplugins 厂商漏洞列表 / CVE 中文分析 82

bplugins 厂商相关 82 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

bplugins 是一款面向 WordPress 的插件开发框架，旨在简化插件构建流程。截至最新统计，该框架已关联 72 条 CVE 漏洞。历史漏洞主要集中在远程代码执行、跨站脚本及权限绕过等高危类型，部分源于对输入验证和输出转义的疏忽。尽管其提升了开发效率，但底层安全机制的缺陷导致多次被利用，建议使用者严格审查依赖版本并及时更新，以规避潜在的系统入侵风险。

Top products by bplugins: B Blocks bSlider – Create Responsive Image, Post, Product, and Video Sliders Tiktok Feed Button Block HTML5 Video Player – Embed and Play Videos in Custom Player Button Block – Design Stylish, Interactive, and Multi-Functional Buttons Html5 Audio Player HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player B Slider PDF Poster Info Cards Icon List Block Document Embedder – Embed PDFs, Word, Excel, and Other Files 3D viewer – Embed 3D Models Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) Info Cards – Add Text and Media in Card Layouts Panorama Viewer – 360 Degree Image + Video Viewer Services Section Block – Showcase Service Details in Grid or Columns Flash & HTML5 Video Advanced scrollbar Image Gallery block – Create and display photo gallery/photo album. Carousel Block – Responsive Image and Content Carousel MailChimp Block Voice Feedback YT Player Block for Mailchimp – Add Email Subscription Forms and Collect Leads Media Player Addons for Elementor – Audio and Video Widgets for Elementor Icons Font Loader – Load Web Fonts and Icon Libraries Survey Form Block – collect answers and insights from your audience Icon List Block – Add Icon-Based Lists with Custom Styles
CVE ID 标题 CVSS 风险等级 Published
CVE-2026-5626 WordPress Survey Form Block – collect answers and insights from your audience 授权问题漏洞 — Survey Form Block – collect answers and insights from your audience CWE-862 4.3 Medium 2026-07-29
CVE-2026-27422 WordPress YT Player 授权问题漏洞 — YT Player CWE-862 5.3 Medium 2026-07-23
CVE-2026-57647 bplugins Panorama Viewer – 360 Degree Image + Video Viewer 代码注入漏洞 — Panorama Viewer – 360 Degree Image + Video Viewer CWE-98 7.5 High 2026-06-26
CVE-2026-57323 bplugins HTML5 Video Player 授权问题漏洞 — Flash & HTML5 Video CWE-862 5.8 Medium 2026-06-26
CVE-2026-56063 Bplugins MailChimp Block 授权问题漏洞 — MailChimp Block CWE-862 8.3 High 2026-06-26
CVE-2026-11402 bplugins Services Section Block – Showcase Service Details in Grid or Columns 跨站脚本漏洞 — Services Section Block – Showcase Service Details in Grid or Columns CWE-79 6.4 Medium 2026-06-18
CVE-2026-39579 bPlugins bBlocks 权限许可和访问控制问题漏洞 — B Blocks CWE-266 8.8 High 2026-06-15
CVE-2026-53736 WordPress plugin Easy Twitter Feeds 跨站请求伪造漏洞 — Easy Twitter Feeds CWE-352 4.3 Medium 2026-06-10
CVE-2026-24520 WordPress plugin Tiktok Feed 安全漏洞 — Tiktok Feed CWE-862 4.3 Medium 2026-05-26
CVE-2026-27416 WordPress plugin PDF Poster 安全漏洞 — PDF Poster CWE-862 5.3 Medium 2026-05-07
CVE-2026-6446 WordPress plugin My Social Feeds – Social Feeds Embedder 安全漏洞 — My Social Feeds – Social Feeds Embedder Plugin for WordPress CWE-522 5.4 Medium 2026-05-02
CVE-2026-40729 WordPress plugin 3D viewer – Embed 3D Models 安全漏洞 — 3D viewer – Embed 3D Models CWE-862 4.3 Medium 2026-04-15
CVE-2026-32489 WordPress plugin B Blocks 安全漏洞 — B Blocks CWE-862 6.5 Medium 2026-03-25
CVE-2026-4120 WordPress plugin Info Cards – Add Text and Media in Card Layouts 跨站脚本漏洞 — Info Cards – Add Text and Media in Card Layouts CWE-79 6.4 Medium 2026-03-19
CVE-2026-32416 WordPress plugin PDF Poster 安全漏洞 — PDF Poster CWE-862 5.4 Medium 2026-03-13
CVE-2026-32359 WordPress plugin Icon List Block 跨站脚本漏洞 — Icon List Block CWE-79 6.5 Medium 2026-03-13
CVE-2026-1228 WordPress plugin Timeline Block 安全漏洞 — Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) CWE-639 4.3 Medium 2026-02-06
CVE-2026-1294 WordPress plugin All In One Image Viewer Block 代码问题漏洞 — All In One Image Viewer Block – Gutenberg block to create image viewer with hyperlink CWE-918 7.2 High 2026-02-05
CVE-2026-1389 WordPress plugin Document Embedder 安全漏洞 — Document Embedder – Embed PDFs, Word, Excel, and Other Files CWE-639 4.3 Medium 2026-01-28
CVE-2026-24565 WordPress plugin B Accordion 安全漏洞 — B Accordion CWE-201 6.5 Medium 2026-01-23
CVE-2026-24383 WordPress plugin B Slider 跨站脚本漏洞 — B Slider CWE-79 6.5 Medium 2026-01-22
CVE-2026-0833 WordPress plugin Team Section Block 跨站脚本漏洞 — Team Section Block – Showcase Team Members with Layout Options CWE-79 6.4 Medium 2026-01-17
CVE-2025-13999 WordPress plugin HTML5 Audio Player 代码问题漏洞 — HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player CWE-918 7.2 High 2025-12-19
CVE-2025-60079 WordPress plugin Parallax Section block 安全漏洞 — Parallax Section block CWE-862 7.1 High 2025-12-18
CVE-2025-66110 WordPress plugin Tiktok Feed 安全漏洞 — Tiktok Feed CWE-862 5.3 Medium 2025-11-21
CVE-2025-12376 WordPress plugin Icon List Block 代码问题漏洞 — Icon List Block – Add Icon-Based Lists with Custom Styles CWE-918 6.4 Medium 2025-11-18
CVE-2025-54711 WordPress plugin Info Cards 安全漏洞 — Info Cards CWE-862 7.1 High 2025-11-06
CVE-2025-49900 WordPress plugin Advanced scrollbar 安全漏洞 — Advanced scrollbar CWE-266 8.8 High 2025-11-06
CVE-2025-49394 WordPress plugin Image Gallery block – Create and display photo gallery/photo album 安全漏洞 — Image Gallery block – Create and display photo gallery/photo album. CWE-862 7.1 High 2025-11-06
CVE-2025-12384 WordPress plugin Document Embedder – Embed PDFs Word Excel and Other Files 安全漏洞 — Document Embedder – Embed PDFs, Word, Excel, and Other Files CWE-862 8.6 High 2025-11-05

本页汇总了 bplugins 厂商截至目前公开的全部 82 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。