WordPress Local SEO For Divi & Gutenberg Blocks plugin <= 9.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Local SEO For Divi & Gutenberg Blocks plugin versions = 9.1.2. Solution Update the WordPress Local SEO For Divi & Gutenberg Blocks plugin to the latest available version at least 9.1.3...

WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin <= 1.3.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin versions = 1.3.9. Solution No patched version available...

WordPress WP Munich Blocks – Gutenberg Blocks for WordPress plugin < 0.11.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Munich Blocks – Gutenberg Blocks for WordPress plugin versions 0.11.0. Solution Update the WordPress WP Munich Blocks – Gutenberg Blocks for WordPress plugin to the latest available version at least 0.11.0...

WordPress One Page Blocks plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress One Page Blocks plugin versions = 1.0.0. Solution No patched version available...

WordPress Stackable – Page Builder Gutenberg Blocks plugin < 3.1.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Stackable – Page Builder Gutenberg Blocks plugin versions 3.1.5. Solution Update the WordPress Stackable – Page Builder Gutenberg Blocks plugin to the latest available version at least 3.1.5...

WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Gutenberg Blocks – ACF Blocks Suite plugin versions = 2.6.7. Solution Update the WordPress Gutenberg Blocks – ACF Blocks Suite plugin to the latest available version at least 2.6.8...

WordPress Local SEO For Divi & Gutenberg Blocks plugin <= 9.1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Local SEO For Divi & Gutenberg Blocks plugin versions = 9.1.2. Solution Update the WordPress Local SEO For Divi & Gutenberg Blocks plugin to the latest available version at least 9.1.3...

WordPress Master Blocks – Gutenberg Site Builder plugin <= 1.0.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Master Blocks – Gutenberg Site Builder plugin versions = 1.0.4. Solution No patched version available...

WordPress Extreme Blocks plugin < 0.8.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Extreme Blocks plugin versions 0.8.1. Solution Update the WordPress Extreme Blocks plugin to the latest available version at least 0.8.1...

WordPress Master Blocks – Gutenberg Site Builder plugin <= 1.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Master Blocks – Gutenberg Site Builder plugin versions = 1.0.4. Solution No patched version available...

WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin <= 1.3.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin versions = 1.3.9. Solution No patched version available...

WordPress Mobile blocks plugin <= 1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Mobile blocks plugin versions = 1.2. Solution Update the WordPress Mobile blocks plugin to the latest available version at least 1.2.1...

WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.7 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Gutenberg Blocks – ACF Blocks Suite plugin versions = 2.6.7. Solution Update the WordPress Gutenberg Blocks – ACF Blocks Suite plugin to the latest available version at least 2.6.8...

WordPress Convert Classic Editor to Gutenberg Blocks plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Convert Classic Editor to Gutenberg Blocks plugin versions = 1.0.6. Solution No patched version available...

WordPress Extreme Blocks plugin < 0.8.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Extreme Blocks plugin versions 0.8.1. Solution Update the WordPress Extreme Blocks plugin to the latest available version at least 0.8.1...

WordPress Mobile blocks plugin <= 1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Mobile blocks plugin versions = 1.2. Solution Update the WordPress Mobile blocks plugin to the latest available version at least 1.2.1...

The vulnerability lies in the implementation of the edit_posts permission plugin for PHP code, which allows a hacker to execute arbitrary code.

The vulnerability of the editposts permission implementation in the PHP plugin for PHP Everywhere is related to incorrect code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using Götterhuber blocks...

Cross site scripting

Prism is a syntax highlighting library. Starting with version 1.14.0 and prior to version 1.27.0, Prism's command line plugin can be used by attackers to achieve a cross-site scripting attack. The command line plugin did not properly escape its output, leading to the input text being inserted int...

WordPress CP Blocks plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is a WordPress application plugin. A cross-site scripting vulnerability exists in versions of the WordPress CP Blocks plugin prior to 1.0.15, which stems from the plugin's failu...

Critical remote code execution vulnerabilities in WordPress PHP everywhere Plugin

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Three critical remote code execution RCE vulnerabilities in a WordPress plugin PHP everywhere have been discovered. It is a plugin that allows web developers to utilize PHP code in pages, posts, the sidebar, or anywhere on...