Button Block – Stylish buttons that get more clicks

Button Block – Stylish buttons that get more clicks has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 5 are fixed as of September 2026. Their average CVSS score is 4.7, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 3 disclosures.

The most common weakness is Authorization Bypass Through User-Controlled Key, behind 1 of the records (20%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

Every one of the 5 issues recorded for Button Block – Stylish buttons that get more clicks has a vendor fix available, so running the current release closes all known holes.

4 independent researchers contributed these findings, most of them (2) reported by Khalid Yusuf. Button Block – Stylish buttons that get more clicks is installed on roughly 5,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
4.7/ 10
Patch Coverage100%
Open

0

Fixed

5

Get automatic notifications for all Button Block – Stylish buttons that get more clicks vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-22815

Button Block <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

5 records
Button Block – Stylish buttons that get more clicks banner
Latestv1.2.6

Button Block – Stylish buttons that get more clicks

bPlugins

Author

bPlugins

5.0(7)
100/100
Last Updated
2026-09-08 (5d ago)
Active Installs
5,000+
Downloads
96,681
Requires WP
6.5+
Requires PHP
7.4+
Tested up to
WP 7.1
Created
2022-06-08 (4y ago)

Demos | Buy Now | Demo Get multi-functional buttons. The Button Block plugin comes up with many useful styling options that make you happy to build responsive, interactive, stylish buttons in a few clicks. Features of Button Block Download: Download files with this button easily. Icon: Add icon with button text. Tooltip: Show tooltip text on button hover. Size: Make the button small, medium, large, extra large also full width. 3D: Make button 3D with just single click. Animation: Lots of animation style with duration. Shortcode: Save a button once and place it anywhere with a shortcode. Hide Menu: Hide Button block option from admin menu. Premium Features of Button Block Button Action: Use the button as a link or popup trigger. rel Attribute: Add the rel/relation attribute to the anchor link. referrer-policy Attribute: Add the Referrer Policy attribute to the anchor link. Download File Name: For the download, enter a custom name for the download file. Icon Position: Set the icon position to the left or right. Tooltip Position: Choose a different position for the tooltip. Hide on Devices: Hide on various devices (desktop, tablet, and mobile). Popup Content: Show Image, Audio, Video, Block Content, Document(.pdf, .doc, .docx, .xls, .xlsx), and Iframe. Security Features: Protect a button behind a login, a password, or an email. The link is delivered only after the visitor passes the check. Email Leads: Collect the emails an email protected button captures, and browse them from the admin. How to use Button Block Getting started is easy. Step by Step Setup – First, install the Button Block plugin – Add the Button Block from the block category called “Widgets” in the Gutenberg editor. – You can change block settings from the right-side settings sidebar. – Enjoy! For installation help click on Installation Tab Feedback Did you like this plugin? Dislike it? Have a feature request? Please share your feedback with us Check out the Parent Plugin of this plugin- B Blocks – A blocks collection and page building tool for Gutenberg. Check out our other WordPress Plugins- Html5 Video Player – Display videos as single and playlist in multiple skins. PDF Poster – Display/Embed PDF files with different styles. Html5 Audio Player – Listen audios with awesome visuals. StreamCast – Customizable radio player with different skins. 3D Viewer – Embed 3D models and 3D products with interaction. Advanced Post Block – Show posts and custom posts in different layouts. Third-Party Libraries This plugin bundles the following third-party JavaScript/PHP/CSS libraries. Font Awesome 7 Source: https://fontawesome.com/ GitHub: https://github.com/FortAwesome/Font-Awesome License: MIT (for code), SIL OFL 1.1 (for fonts), CC BY 4.0 (for icons) Purpose: Provides vector icons library for styling buttons. AOS (Animate on Scroll) Source: https://michalsnik.github.io/aos/ GitHub: https://github.com/michalsnik/aos License: MIT – https://github.com/michalsnik/aos/blob/master/LICENSE Purpose: Provides scroll-driven entry animations for button block elements. Freemius Lite SDK Source: https://bplugins.com/ GitHub: https://github.com/bPlugins/freemius-lite-sdk License: GPL-2.0-or-later – https://www.gnu.org/licenses/gpl-2.0.html Purpose: Provides an opt-in consent form for usage tracking and analytics to help improve the plugin. No data is sent before explicit user consent. External Services: Communicates with api.bplugins.com (activation events) and wp.freemius.com (opt-in processing) only after user opt-in. See bPlugins Privacy Policy and Freemius Privacy Policy. Freemius SDK Source: https://freemius.com/ GitHub: https://github.com/Freemius/wordpress-sdk License: GPLv3 – https://github.com/Freemius/wordpress-sdk/blob/master/LICENSE.txt Purpose: Provides opt-in usage tracking and analytics to help improve the plugin. bpl-tools Source / GitHub: https://github.com/bPlugins/bpl-tools License: GPL-2.0-or-later – https://www.gnu.org/licenses/gpl-2.0.html Purpose: Shared utility library providing admin dashboard components and common Gutenberg editor controls. External Services: The library may connect to bPlugins, WordPress.org, and Freemius services for product data and checkout functionality. See full details: https://github.com/bPlugins/bpl-tools#external-requests–why-they-are-made

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C