Threat Database

Threat Entry Updated 2026-11-11

B Blocks - Security Vulnerability (CVE-2026-125451)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through 2.1.15.

PLUGIN B Blocks

CVE-2026-125451

MEDIUM CVSS 6.5 2026-11-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-10-06

B Blocks - Security Vulnerability (CVE-2026-104400)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through 2.1.8.

PLUGIN B Blocks

CVE-2026-104400

MEDIUM CVSS 6.5 2026-10-05

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

B Blocks - Privilege Escalation (CVE-2026-39579)

Contributor Privilege Escalation in B Blocks

PLUGIN B Blocks

CVE-2026-39579

HIGH CVSS 8.8 2026-06-15

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

B Blocks - Broken Access Control (CVE-2026-32489)

Missing Authorization vulnerability in bPlugins B Blocks b-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Blocks: from n/a through < 2.0.30.

PLUGIN B Blocks

CVE-2026-32489

MEDIUM CVSS 6.5 2026-03-25

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

B Blocks - Cross-Site Scripting (XSS) (CVE-2025-54708)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows DOM-Based XSS.This issue affects B Blocks: from n/a through

PLUGIN B Blocks

CVE-2025-54708

MEDIUM CVSS 6.5 2025-08-14

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

B Blocks - Privilege Escalation (CVE-2025-8059)

The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization and improper input validation within the rgfr_registration() function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to create a new account and assign it the administrator role.

PLUGIN B Blocks

CVE-2025-8059

CRITICAL CVSS 9.8 2025-08-12

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2026-06-17

B Blocks - Cross-Site Scripting (XSS) (CVE-2025-32173)

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through

PLUGIN B Blocks

CVE-2025-32173

MEDIUM CVSS 6.5 2025-04-04

Risk Score

Open Full Technical Breakdown