CVE-2026-129260

A path traversal vulnerability exists in Mereithhh VanBlog up to version 0.54.0 . The flaw is located in the fs.readFileSync function within the local.provider.ts file of the Custom Page Handler component. An attacker can exploit this remotely by manipulating the path argument to access unauthori...

EUVD-2026-125941

A security vulnerability has been detected in Mereithhh VanBlog up to 0.54.0. This vulnerability affects the function fs.readFileSync of the file local.provider.ts of the component Custom Page Handler. The manipulation of the argument path leads to path traversal. The attack is possible to be...

EUVD-2026-53111

The WP Custom HTML Page WordPress plugin through 0.6.2 does not sanitise HTML stored through one of its custom page handlers, nor restrict it to users allowed to post unfiltered HTML, allowing users with the Author role to store JavaScript that is served unescaped at a public URL and executes for...

PT-2026-67987

Name of the Vulnerable Software and Affected Versions WP Custom HTML Page versions prior to 0.6.3 Description Insufficient sanitization of HTML stored through a custom page handler allows users with the Author role to perform a Stored Cross-Site Scripting XSS attack. This occurs because the plugi...