CVE-2025-31817

CVE-2025-31817 affects BlockWheels (WPWheels) for WordPress. It is a DOM-based XSS caused by improper input neutralization during page generation, impacting BlockWheels versions n/a–1.0.1. Exploitation requires at least LOW privileged user with authentication (Contributor+). A fix exists in Block...

WordPress plugin BlockWheels 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting vulnerability...