Free tool
Is my WordPress plugin safe?
Type a plugin or theme and the version you run, and we’ll show every known vulnerability that affects it, from the 390,007 records in our vulnerability database. The version is listed under Plugins in your WordPress dashboard.
Plugin · b-blocks
B Blocks
6 known vulnerabilities on record. Add your version above to see which ones affect you.
Oct 5, 2026B Blocks: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2026-104400 · affects up to 2.1.8 · reported by PatchstackMedium 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through 2.1.8.
Jun 15, 2026Contributor Privilege Escalation in B Blocks <= 2.0.31 versions.CVE-2026-39579 · affects up to 2.0.31 · reported by PatchstackHigh 8.8
Contributor Privilege Escalation in B Blocks <= 2.0.31 versions.
Mar 25, 2026B Blocks: Missing AuthorizationCVE-2026-32489 · reported by PatchstackMedium 6.5
Missing Authorization vulnerability in bPlugins B Blocks b-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects B Blocks: from n/a through < 2.0.30.
Aug 14, 2025B Blocks: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2025-54708 · affects up to 2.0.5 · reported by PatchstackMedium 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows DOM-Based XSS.This issue affects B Blocks: from n/a through <= 2.0.5.
Aug 12, 2025B Blocks: Privilege EscalationCVE-2025-8059 · affects up to 2.0.6 · reported by WordfenceCritical 9.8
The B Blocks plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization and improper input validation within the rgfr_registration() function in all versions up to, and including, 2.0.6. This makes it possible for unauthenticated attackers to create a new account and assign it the administrator role.
NVD recordplugins.trac.wordpress.orgplugins.trac.wordpress.org
Apr 4, 2025B Blocks: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CVE-2025-32173 · affects up to 2.0.0 · reported by PatchstackMedium 6.5
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins B Blocks b-blocks allows Stored XSS.This issue affects B Blocks: from n/a through <= 2.0.0.
Versions are matched against the affected ranges published with each record. A plugin can ship a fix under its own numbering, so if something looks off, check the linked record. Want the whole site checked at once? Run the free website check.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.