No recent security news found for Bplugins.
| CVE ID | Severity | Patch | EPSS | Date |
|---|---|---|---|---|
| CVE-2026-24520 | 4.3 MEDIUM | PATCH UNDER REVIEW | 0.15% | 2026-05-26 |
| CVE-2026-27416 | 5.3 MEDIUM | PATCH UNDER REVIEW | 0.18% | 2026-05-07 |
| CVE-2025-60079 PoC | 7.1 HIGH | PATCH UNDER REVIEW | 0.05% | 2025-12-18 |
| CVE-2025-66110 PoC | 5.3 MEDIUM | PATCH UNDER REVIEW | 0.04% | 2025-11-21 |
| CVE-2025-54711 PoC | 7.1 HIGH | PATCH UNDER REVIEW | 0.06% | 2025-11-06 |
| CVE-2025-49394 PoC | 7.1 HIGH | PATCH UNDER REVIEW | 0.06% | 2025-11-06 |
| CVE-2025-54734 PoC | 5.8 MEDIUM | PATCH UNDER REVIEW | 0.06% | 2025-08-28 |
| CVE-2025-54710 PoC | 7.1 HIGH | PATCH UNDER REVIEW | 0.07% | 2025-08-28 |
| CVE-2025-54708 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.14% | 2025-08-14 |
| CVE-2025-54694 | 4.3 MEDIUM | PATCH UNDER REVIEW | 0.08% | 2025-08-14 |
| CVE-2025-54051 | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.14% | 2025-07-16 |
| CVE-2025-27326 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.14% | 2025-07-04 |
| CVE-2025-39524 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.53% | 2025-04-16 |
| CVE-2025-32173 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.88% | 2025-04-04 |
| CVE-2025-26952 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.10% | 2025-02-25 |
| CVE-2025-26949 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.11% | 2025-02-25 |
| CVE-2025-26947 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.11% | 2025-02-25 |
| CVE-2025-26945 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.10% | 2025-02-25 |
| CVE-2025-26939 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.11% | 2025-02-25 |
| CVE-2025-26938 PoC | 6.5 MEDIUM | PATCH UNDER REVIEW | 0.11% | 2025-02-25 |
Bplugins is a Bangladeshi software vendor primarily known for developing WordPress plugins, including the popular 'Sticky Menu (or Anything!) on Scroll' plugin. Their products are widely used for website customization and performance optimization, but the company has accumulated 42 CVEs, indicating significant security vulnerabilities in their plugins that pose risks to WordPress site owners.
Based on 0 critical CVEs, 0 CISA KEV, 100% unpatched. Model: GDPR Art.83 · not legal advice.