125 matches found
CVE-2026-5924
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute in all versions up to, and including, 2.1.3. This is due to the use of eval on user-controlled block content in the frontend JavaScript mapStyles...
EUVD-2026-85111
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute in all versions up to, and including, 2.1.3. This is due to the use of eval on user-controlled block content in the frontend JavaScript mapStyles...
CVE-2026-5924
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 2.1.3 . The flaw exists within the Google Maps block due to the customStyle attribute, where the mapStyles() function in the frontend JavaScript uses eval() on...
CVE-2026-5924 Getwid <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle'
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute in all versions up to, and including, 2.1.3. This is due to the use of eval on user-controlled block content in the frontend JavaScript mapStyles...
CVE-2026-5924 Getwid <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps 'customStyle'
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute in all versions up to, and including, 2.1.3. This is due to the use of eval on user-controlled block content in the frontend JavaScript mapStyles...
PT-2026-97202
Name of the Vulnerable Software and Affected Versions Getwid – Gutenberg Blocks versions prior to 2.1.4 Description Stored Cross-Site Scripting occurs via the 'customStyle' attribute of the Google Maps block. The issue stems from the use of the eval function on user-controlled block content withi...
CVE-2026-5924: Improper Neutralization of Input During Web Page Generation
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Google Maps block's 'customStyle' attribute in all versions up to, and including, 2.1.3. This is due to the use of eval on user-controlled block content in the frontend JavaScript mapStyles...
WordPress Getwid – Gutenberg Blocks plugin <= 2.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by AlexHenry in WordPress Plugin Getwid versions = 2.1.3...
WordPress Getwid plugin <= 2.0.10 - Missing Authorization to Google API key update vulnerability
Missing Authorization to Google API key update vulnerability discovered by Peter Thaleikis in WordPress Plugin Getwid versions = 2.0.10...
EUVD-2024-47574
Malicious code in bioql PyPI...
EUVD-2023-24084
Malicious code in bioql PyPI...
EUVD-2025-30581
Malicious code in bioql PyPI...
EUVD-2023-24098
Malicious code in bioql PyPI...
EUVD-2024-17669
Malicious code in bioql PyPI...
CVE-2025-58252
Insertion of Sensitive Information Into Sent Data vulnerability in jetmonsters Getwid getwid allows Retrieve Embedded Sensitive Data.This issue affects Getwid: from n/a through = 2.1.2...
CVE-2025-58252
Insertion of Sensitive Information Into Sent Data vulnerability in jetmonsters Getwid getwid allows Retrieve Embedded Sensitive Data.This issue affects Getwid: from n/a through = 2.1.2...
WordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure Vulnerability
Sensitive Data Exposure Vulnerability discovered by MD ISMAIL in WordPress Plugin Getwid versions = 2.1.2...
CVE-2025-58252 WordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in jetmonsters Getwid getwid allows Retrieve Embedded Sensitive Data.This issue affects Getwid: from n/a through = 2.1.2...
CVE-2025-58252 WordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure Vulnerability
Insertion of Sensitive Information Into Sent Data vulnerability in jetmonsters Getwid getwid allows Retrieve Embedded Sensitive Data.This issue affects Getwid: from n/a through = 2.1.2...
CVE-2025-58252
CVE-2025-58252 affects Getwid (WordPress Getwid plugin) up to version 2.1.2. Reported as an authenticated issue (Contributor+) describing an Insertion of Sensitive Information Into Sent Data vulnerability that enables retrieval of embedded sensitive data from Getwid (Getwid – Gutenberg Blocks). C...