8.8
High
CVE-2025-8418 The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all…
Description
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all versions up to, and including, 1.1.30. This is due to missing capability checks on the activated_plugin function. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins on the server which can make remote code execution possible.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| B Slider- Gutenberg Slider Block for WP 1.1 | earliest → 1.1.30 | No fix stated |
| bSlider – Create Responsive Image, Post, Product, and Video Sliders 1.1 | earliest → 1.1.30 | No fix stated |
Other CVEs of B Slider- Gutenberg Slider Block for WP
The 4 CVEs of B Slider- Gutenberg Slider Block for WP →
CVE-2025-8680
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Server-Side Request Forgery in version…
4.3
Medium
CVE-2025-8676
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in…
4.3
Medium
CVE-2024-13514
The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Information Exposure in all versions…
4.3
Medium