How many bPlugins Button Block CVEs are in CISA KEV?

None of bPlugins Button Block's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of bPlugins Button Block are affected?

17 distinct bPlugins Button Block versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in bPlugins Button Block CVEs?

bPlugins Button Block's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

What is the average severity of bPlugins Button Block CVEs?

The average CVSS base score across bPlugins Button Block's scored CVEs is 6.5.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

bPlugins

5 CVEs

bPlugins Button Block Vulnerabilities

Name: bPlugins Button Block vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Button Block by bPlugins.

5

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.5

Avg CVSS

2024–2025

Last updated August 14, 2025

Overview

bPlugins Button Block has 5 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting bPlugins Button Block, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of bPlugins Button Block's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of bPlugins Button Block's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No bPlugins Button Block CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every bPlugins Button Block version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 1.1.62 CVEs
< 1.1.51 CVE
< 1.1.71 CVE
<= 1.1.51 CVE
<= 1.1.91 CVE
<= 1.2.01 CVE
>= 1.1.61 CVE
>= 1.2.01 CVE
>= 1.2.11 CVE

Fixed in

1.1.62 CVEs
> 1.1.51 CVE
> 1.1.91 CVE
> 1.2.01 CVE
1.1.51 CVE
1.1.71 CVE
1.2.01 CVE
1.2.11 CVE

Find a version

5 CVEs

Sort

WordPress Button Block Plugin plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) Vulnerability
CVE-2025-54694
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.1% (4th pct)2025-08-14
WordPress Button Block plugin <= 1.1.5 - Broken Access Control vulnerability
CVE-2025-22787
Patch
CWE-862
High · CVSS 8.8
EPSS 0.3% (23th pct)2025-01-15
WordPress Button Block plugin <= 1.1.9 - Cross Site Scripting (XSS) vulnerability
CVE-2025-22815
Patch
CWE-79
Medium · CVSS 6.5
EPSS 0.2% (11th pct)2025-01-09
Button Block – Get fully customizable & multi-functional buttons <= 1.1.5 - Authenticated (Contributor+) Post Disclosure via Post Duplication
CVE-2024-12560
Patch
CWE-200
Medium · CVSS 6.5
EPSS 0.4% (29th pct)2024-12-19
Button Block – Get fully customizable & multi-functional buttons <= 1.1.4 - Authenticated (Contributor+) Post Disclosure
CVE-2024-10671
Patch
CWE-639
Medium · CVSS 6.5
EPSS 0.5% (40th pct)2024-11-21

Common weakness types

The CWE weakness categories most often found in bPlugins Button Block CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many bPlugins Button Block CVEs were published each year.

2024

2

2025

3

Other bPlugins products

Browse vulnerabilities for other products by bPlugins.

html5 video player6 CVEs B Blocks4 CVEs bSlider – Create Responsive Image, Post, Product, and Video Sliders4 CVEs Html5 Audio Player4 CVEs Flash & HTML5 Video3 CVEs HTML5 Audio Player – The Ultimate No-Code Podcast, MP3 & Audio Player3 CVEs HTML5 Video Player – Embed and Play Videos in Custom Player3 CVEs Icons Font Loader3 CVEs

All bPlugins vulnerabilities

Frequently asked questions

Common questions about bPlugins Button Block vulnerabilities.

How many CVEs does bPlugins Button Block have?: bPlugins Button Block has 5 published CVE records since 2024.
How many bPlugins Button Block CVEs are in CISA KEV?: None of bPlugins Button Block's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for bPlugins Button Block vulnerabilities?: No bPlugins Button Block CVEs currently have a tracked public exploit in this dataset.
Which versions of bPlugins Button Block are affected?: 17 distinct bPlugins Button Block versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in bPlugins Button Block CVEs?: bPlugins Button Block's CVEs most often map to these CWE weakness types: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-639 (Authorization Bypass Through User-Controlled Key), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
What is the average severity of bPlugins Button Block CVEs?: The average CVSS base score across bPlugins Button Block's scored CVEs is 6.5.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track bPlugins Button Block vulnerabilities

Monitor new bPlugins Button Block vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing