What’s Vulnerable › Products

bPlugins Button Block vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your bPlugins Button Block version is affected

Latest bPlugins Button Block vulnerabilities

• CVE-2026-116400 — WordPress Button Block plugin <= 1.2.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-54694 — WordPress Button Block Plugin plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) Vulnerability (CVSS 4.3)
• CVE-2025-22787 — WordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerability (CVSS 8.8)
• CVE-2025-22815 — WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-12560 — Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication (CVSS 6.5)
• CVE-2024-10671 — Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure (CVSS 6.5)