目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1336 元

100%
请我们喝杯咖啡

bplugins 厂商漏洞列表 / CVE 中文分析 82

bplugins 厂商相关 82 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。

bplugins 是一款面向 WordPress 的插件开发框架，旨在简化插件构建流程。截至最新统计，该框架已关联 72 条 CVE 漏洞。历史漏洞主要集中在远程代码执行、跨站脚本及权限绕过等高危类型，部分源于对输入验证和输出转义的疏忽。尽管其提升了开发效率，但底层安全机制的缺陷导致多次被利用，建议使用者严格审查依赖版本并及时更新，以规避潜在的系统入侵风险。

Top products by bplugins: B Blocks bSlider – Create Responsive Image, Post, Product, and Video Sliders Tiktok Feed Button Block HTML5 Video Player – Embed and Play Videos in Custom Player Button Block – Design Stylish, Interactive, and Multi-Functional Buttons Html5 Audio Player HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player B Slider PDF Poster Info Cards Icon List Block Document Embedder – Embed PDFs, Word, Excel, and Other Files 3D viewer – Embed 3D Models Timeline Block – Beautiful Timeline Builder for WordPress (Vertical & Horizontal Timelines) Info Cards – Add Text and Media in Card Layouts Panorama Viewer – 360 Degree Image + Video Viewer Services Section Block – Showcase Service Details in Grid or Columns Flash & HTML5 Video Advanced scrollbar Image Gallery block – Create and display photo gallery/photo album. Carousel Block – Responsive Image and Content Carousel MailChimp Block Voice Feedback YT Player Block for Mailchimp – Add Email Subscription Forms and Collect Leads Media Player Addons for Elementor – Audio and Video Widgets for Elementor Icons Font Loader – Load Web Fonts and Icon Libraries Survey Form Block – collect answers and insights from your audience Icon List Block – Add Icon-Based Lists with Custom Styles
CVE ID 标题 CVSS 风险等级 Published
CVE-2025-24595 WordPress plugin All Embed – Elementor Addons 跨站脚本漏洞 — All Embed – Elementor Addons CWE-79 6.5 Medium 2025-01-24
CVE-2025-22787 WordPress plugin Button Block 安全漏洞 — Button Block CWE-862 4.3 Medium 2025-01-15
CVE-2024-13156 WordPress plugin HTML5 Video Player 跨站脚本漏洞 — HTML5 Video Player – Embed and Play Videos in Custom Player CWE-79 6.4 Medium 2025-01-14
CVE-2025-22815 WordPress plugin Button Block 跨站脚本漏洞 — Button Block CWE-79 6.5 Medium 2025-01-09
CVE-2024-12560 WordPress plugin Button Block 信息泄露漏洞 — Button Block – Design Stylish, Interactive, and Multi-Functional Buttons CWE-200 4.3 Medium 2024-12-19
CVE-2024-11882 WordPress plugin FAQ And Answers 跨站脚本漏洞 — Awesome FAQ – Modern Accordion, Tabs,Responsive & Super Fast FAQ Builder. CWE-79 6.4 Medium 2024-12-12
CVE-2024-11880 WordPress plugin B Testimonial 跨站脚本漏洞 — B Testimonial – Customer Testimonials in Custom Layouts CWE-79 6.4 Medium 2024-12-04
CVE-2024-10666 WordPress plugin Easy Twitter Feed 安全漏洞 — Feeds for Twitter – Embed Social Media Posts with Live Updates CWE-639 4.3 Medium 2024-11-22
CVE-2024-10671 WordPress plugin Button Block 安全漏洞 — Button Block – Design Stylish, Interactive, and Multi-Functional Buttons CWE-639 4.3 Medium 2024-11-21
CVE-2024-10667 WordPress plugin Content Slider Block 安全漏洞 — Content Slider Block – Slide Through Text or Media Content CWE-639 4.3 Medium 2024-11-09
CVE-2024-10669 WordPress plugin Countdown Timer block 安全漏洞 — Countdown Timer Block – Animated Countdown for Events or Launches CWE-639 4.3 Medium 2024-11-09
CVE-2024-47631 WordPress plugin Logo Carousel 跨站脚本漏洞 — Logo Carousel – Clients logo carousel for WP CWE-79 6.5 Medium 2024-10-05
CVE-2024-7727 WordPress plugin HTML5 Video Player 安全漏洞 — HTML5 Video Player – Embed and Play Videos in Custom Player CWE-862 5.3 Medium 2024-09-11
CVE-2024-7721 WordPress plugin HTML5 Video Player 安全漏洞 — HTML5 Video Player – Embed and Play Videos in Custom Player CWE-862 4.3 Medium 2024-09-11
CVE-2024-43148 WordPress plugin StreamCast 跨站脚本漏洞 — StreamCast CWE-79 5.9 Medium 2024-08-12
CVE-2024-37445 WordPress plugin Html5 Audio Player 跨站脚本漏洞 — Html5 Audio Player CWE-79 6.5 Medium 2024-07-22
CVE-2024-4398 WordPress plugin HTML5 Audio Player 安全漏洞 — HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player CWE-79 6.4 Medium 2024-05-10
CVE-2024-0908 WordPress plugin Advanced Post Block 安全漏洞 — Advanced Post Block – Showcase Posts with Grid, List, Card Layouts and Filters CWE-862 5.3 Medium 2024-05-02
CVE-2024-30432 WordPress Plugin B Slider 跨站脚本漏洞 — B Slider - Slider for your block editor CWE-79 6.5 Medium 2024-03-29
CVE-2024-30438 WordPress Plugin Print Page block 跨站脚本漏洞 — Print Page block CWE-79 6.5 Medium 2024-03-29
CVE-2024-23508 WordPress plugin PDF Poster 跨站脚本漏洞 — PDF Poster – PDF Embedder Plugin for WordPress CWE-79 7.1 High 2024-01-31
CVE-2023-5860 WordPress Plugin Icons Font Loader 代码问题漏洞 — Icons Font Loader – Load Web Fonts and Icon Libraries CWE-434 7.2 High 2023-11-02

本页汇总了 bplugins 厂商截至目前公开的全部 82 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。