← Back

Bplugins

bplugins

22 CVEs • 9 products

Products (9)

Click to collapse
Toggle
Html5 Video Player
html5_video_player
6 CVEs
Button Block
button_block
4 CVEs
Html5 Audio Player
html5_audio_player
3 CVEs
Icons Font Loader
icons_font_loader
3 CVEs
Document Embedder
document_embedder
2 CVEs
Easy Twitter Feed
easy_twitter_feed
1 CVE
Polo Video Gallery
polo_video_gallery
1 CVE
Streamcast Radio Player
streamcast_radio_player
1 CVE
Pdf Poster
pdf_poster
1 CVE

CVEs (22)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24413
1Bplugins
1Easy Twitter Feed
Nov 21, 2024
Oct 18, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will b...Show more
The Easy Twitter Feed WordPress plugin before 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcodeShow less
CVE-2021-24412
1Bplugins
1Html5 Audio Player
Nov 21, 2024
Oct 18, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payloa...Show more
The Html5 Audio Player – Audio Player for WordPress plugin before 2.1.3 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcodeShow less