CVE-2025-8418

🗓️ 12 Aug 2025 06:42:42Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 15 Views

CVE-2025-8418: B Slider Block <=1.1.30 enables plugin install by authenticated subscribers via missing activated_plugin checks; RCE risk

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2025-8418	12 Aug 202508:14	–	circl
CNNVD	WordPress plugin B Slider- Gutenberg Slider Block for WP 安全漏洞	12 Aug 202500:00	–	cnnvd
CNVD	WordPress B Slider - Gutenberg Slider Block for WP plugin code execution vulnerability	15 Aug 202500:00	–	cnvd
Cvelist	CVE-2025-8418 B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation	12 Aug 202506:42	–	cvelist
EUVD	EUVD-2025-24224	3 Oct 202520:07	–	euvd
NVD	CVE-2025-8418	12 Aug 202507:15	–	nvd
Patchstack	WordPress B Slider- Gutenberg Slider Block for WP plugin <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation vulnerability	31 Dec 202500:00	–	patchstack
Positive Technologies	PT-2025-32631 · WordPress · B Slider- Gutenberg Slider Block	12 Aug 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-8418	14 Aug 202507:28	–	redhatcve
Vulnrichment	CVE-2025-8418 B Slider- Gutenberg Slider Block for WP <= 1.1.30 - Authenticated (Subscriber+) Missing Authorization to Arbitrary Plugin Installation	12 Aug 202506:42	–	vulnrichment

Vulners

Node

bplugins bslider_create_responsive_image,_post,_product,_and_video_slidersRange≤1.1.30wordpress

[
  {
    "vendor": "bplugins",
    "product": "bSlider – Create Responsive Image, Post, Product, and Video Sliders",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.1.30",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3342079/b-slider/trunk/adminMenu.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/deffd646-5117-4086-bf4b-8a17ffdaad8b
plugins	www.plugins.trac.wordpress.org/browser/b-slider/tags/1.1.28/adminMenu.php