Lucene search
+L

740 matches found

Cvelist
Cvelist
added 2025/10/27 1:33 a.m.16 views

CVE-2025-62924 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.17...

6.5CVSS0.0031EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/27 1:33 a.m.19 views

CVE-2025-62924

CVE-2025-62924 is a Missing Authorization vulnerability affecting the WordPress plugins/Post Grid and Gutenberg Blocks (Post Grid, Posts Slider, Posts Carousel, Post Filter, Post Masonry) up to version 2.3.17. The available sources describe a broken access control vulnerability enabling unauthori...

6.5CVSS6.6AI score0.0031EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/27 1:33 a.m.5 views

CVE-2025-62924 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.17...

6.5CVSS6.6AI score0.0031EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/27 12:00 a.m.6 views

PT-2025-43801

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.17...

8.8CVSS7AI score0.0031EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/27 12:00 a.m.6 views

WordPress plugin Post Grid and Gutenberg Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS6.6AI score0.0031EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2025/10/25 1:28 a.m.12 views

WordPress Gutenberg Blocks – PublishPress Blocks Controls, Visibility, Reusable Blocks plugin <= 3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Gutenberg Blocks versions = 3.3.4...

6.4CVSS5.5AI score0.00216EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/10/23 3:13 p.m.10 views

CVE-2025-62063

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP Travel Gutenberg Blocks: from n/a through = 3.9.2...

6.5CVSS6.4AI score0.00164EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/22 3:31 p.m.13 views

EUVD-2025-35371

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP Travel Gutenberg Blocks: from n/a through = 3.9.2...

5.9AI score0.00164EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/22 3:16 p.m.28 views

CVE-2025-62063

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP Travel Gutenberg Blocks: from n/a through = 3.9.2...

6.5CVSS0.00164EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/10/22 2:32 p.m.7 views

CVE-2025-62063 WordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP Travel Gutenberg Blocks: from n/a through = 3.9.2...

6.5CVSS6AI score0.00164EPSS
SaveExploits0References1
CVE
CVE
added 2025/10/22 2:32 p.m.20 views

CVE-2025-62063

CVE-2025-62063 is a cross-site scripting vulnerability in the WordPress plugin WP Travel Gutenberg Blocks (affected: versions ≤ 3.9.2). The issue stems from improper input neutralization during web page generation, enabling XSS. Public references in Wordfence Intelligence and PatchStack confirm t...

6.5CVSS6AI score0.00164EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/10/22 2:32 p.m.26 views

CVE-2025-62063 WordPress WP Travel Gutenberg Blocks plugin <= 3.9.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP Travel Gutenberg Blocks: from n/a through = 3.9.2...

6.5CVSS0.00164EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/10/22 12:00 a.m.9 views

WordPress plugin WP Travel Gutenberg Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

6.5CVSS6AI score0.00164EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/19 4:37 a.m.25 views

CVE-2025-11361

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.7.1 via the ebsaveaigeneratedimage function. This makes it possible for authenticated attackers, with Author-leve...

6.4CVSS5.7AI score0.00281EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/18 9:30 a.m.14 views

EUVD-2025-34974

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS4.5AI score0.00237EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/18 7:15 a.m.14 views

CVE-2025-11270

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS0.00237EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/18 6:30 a.m.15 views

EUVD-2025-34959

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.7.1 via the ebsaveaigeneratedimage function. This makes it possible for authenticated attackers, with Author-leve...

6.4CVSS5.2AI score0.00281EPSS
SaveExploits0References3
NVD
NVD
added 2025/10/18 5:15 a.m.16 views

CVE-2025-11361

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.7.1 via the ebsaveaigeneratedimage function. This makes it possible for authenticated attackers, with Author-leve...

6.4CVSS0.00281EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2021-11572

Malware in sbrugna...

5.4CVSS5.6AI score0.00534EPSS
SaveExploits1References2
Patchstack
Patchstack
added 2025/10/04 2:55 p.m.8 views

WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Abu Hurayra in WordPress Plugin Post Grid and Gutenberg Blocks versions = 2.3.17...

8.8CVSS7AI score0.0031EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder