Lucene search
+L

30 matches found

RedhatCVE
RedhatCVE
•added 2026/04/10 7:23 p.m.•20 views

CVE-2026-39575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.5.0...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/04/08 9:31 a.m.•36 views

EUVD-2026-20223

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.5.0...

5.9AI score0.00224EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/08 9:16 a.m.•20 views

CVE-2026-39575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.5.0...

6.5CVSS0.00224EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/04/08 8:30 a.m.•11 views

CVE-2026-39575 WordPress Custom Query Blocks plugin <= 5.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.5.0...

5.8AI score0.00224EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/08 8:30 a.m.•37 views

CVE-2026-39575 WordPress Custom Query Blocks plugin <= 5.5.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.5.0...

6.5CVSS0.00224EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/04/08 8:30 a.m.•8 views

CVE-2026-39575

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.5.0...

5.9AI score0.00224EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/08 8:30 a.m.•51 views

CVE-2026-39575

CVE-2026-39575 affects the WordPress plugin “Custom Query Blocks” (Ronald Huereca) for the post-type-archive-mapping feature, with DOM-based XSS caused by improper neutralization of input during web page generation. Affected versions are

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•64 views

PT-2026-31162

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.5.0...

6.5CVSS5.9AI score0.00224EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/08 12:00 a.m.•21 views

WordPress plugin Custom Query Blocks 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.6AI score0.00224EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•2 views

CVE-2026-39575: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.5.0...

6.5CVSS5.8AI score0.00224EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2024-40839

Malicious code in bioql PyPI...

6.5CVSS6.5AI score0.00261EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2024-37630

Malicious code in bioql PyPI...

5.3CVSS6.6AI score0.00396EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 10:33 a.m.•19 views

CVE-2024-44059

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.3.1...

6.5CVSS5.9AI score0.00261EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/01 3:15 p.m.•31 views

CVE-2024-38794

Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Custom Query Blocks: from n/a through 5.2.0...

5.3CVSS0.00396EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/01 2:17 p.m.•40 views

CVE-2024-38794 WordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Custom Query Blocks: from n/a through 5.2.0...

5.3CVSS0.00396EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/01 2:17 p.m.•14 views

CVE-2024-38794 WordPress Custom Query Blocks plugin <= 5.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Custom Query Blocks: from n/a through 5.2.0...

5.3CVSS6.9AI score0.00396EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/01 2:17 p.m.•62 views

CVE-2024-38794

CVE-2024-38794: WordPress Custom Query Blocks plugin (

5.3CVSS5.3AI score0.00396EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/01 12:00 a.m.•13 views

WordPress plugin Custom Query Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.3CVSS6.6AI score0.00396EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•4 views

CVE-2024-38794: Missing Authorization

Missing Authorization vulnerability in MediaRon LLC Custom Query Blocks allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Custom Query Blocks: from n/a through 5.2.0...

5.3CVSS5.8AI score0.00396EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/15 9:15 a.m.•49 views

CVE-2024-44059

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ronald Huereca Custom Query Blocks post-type-archive-mapping allows DOM-Based XSS.This issue affects Custom Query Blocks: from n/a through = 5.3.1...

6.5CVSS0.00261EPSS
SaveExploits0References1
Rows per page
Query Builder