https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-22787.htmlhttps://patchthecve.com/cve/CVE-2025-22787.htmlWed, 17 Jun 2026 08:50:04 +0000MEDIUM 4.3: Missing Authorization vulnerability in bPlugins Button Block button-block allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Button Block: from n/a through <= 1.1.5.https://patchthecve.com/cve/CVE-2025-22815.htmlhttps://patchthecve.com/cve/CVE-2025-22815.htmlWed, 17 Jun 2026 08:50:17 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bPlugins Button Block button-block allows Stored XSS.This issue affects Button Block: from n/a through <= 1.1.9.https://patchthecve.com/cve/CVE-2024-12560.htmlhttps://patchthecve.com/cve/CVE-2024-12560.htmlWed, 17 Jun 2026 06:59:56 +0000MEDIUM 4.3: The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.5 via the 'btn_block_duplicate_post' function. This makes it possible for authenticated attackers, with Contributor-levehttps://patchthecve.com/cve/CVE-2024-10671.htmlhttps://patchthecve.com/cve/CVE-2024-10671.htmlWed, 17 Jun 2026 06:56:10 +0000MEDIUM 4.3: The Button Block – Get fully customizable & multi-functional buttons plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.4 via the [btn_block] shortcode due to insufficient restrictions on which posts can be included. This makes it possible for authen