CVE-2026-7465-Lab

CVE-2026-7465 - Spectra Gutenberg Blocks Local Lab Local Docker lab for analyzing and reproducing CVE-2026-7465 in the WordPress plugin Spectra Gutenberg Blocks ultimate-addons-for-gutenberg. This lab compares: vuln: Spectra 2.19.25 patched: Spectra 2.19.26 The proof is intentionally least-harm. ...

Post Grid <= 2.2.50 - Information Exposure via REST API

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in PickPlugins Post Grid Combo – 36+ Gutenberg Blocks.This issue affects Post Grid Combo – 36+ Gutenberg Blocks: from n/a through 2.2.50. id: CVE-2023-40211 info: name: Post Grid = 2.2.50 - Information Exposure via REST API...

-CVE-2026-7465

-CVE-2026-7465 CVE-2026-7465 Spectra Gutenberg Blocks Authenticated RCE Exploit...

CVE-2026-125819

Missing Authorization vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

EUVD-2026-125355

Missing Authorization vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

CVE-2026-125819

The PublishPress Gutenberg Blocks (advanced-gutenberg) WordPress plugin is vulnerable to a Missing Authorization (CWE-862) flaw in versions up to and including 3.7.6 . This broken access control allows for the exploitation of incorrectly configured security levels. No specific exploit details or ...

CVE-2026-125819 WordPress Gutenberg Blocks plugin <= 3.7.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

WordPress Gutenberg Blocks plugin <= 3.7.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Malvin Valerian Gultom in WordPress Plugin Gutenberg Blocks versions = 3.7.6...

CVE-2026-121771

Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

CVE-2026-121721

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Stored XSS.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

EUVD-2026-125287

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Stored XSS.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

CVE-2026-121721 WordPress Gutenberg Blocks plugin <= 3.7.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Stored XSS.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

CVE-2026-121721

The PublishPress Gutenberg Blocks (advanced-gutenberg) plugin for WordPress versions up to and including 3.7.6 is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the Improper Neutralization of Input During Web Page Generation . This flaw allows an attacker to i...

WordPress Gutenberg Blocks plugin <= 3.7.6 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by mroccon in WordPress Plugin Gutenberg Blocks versions = 3.7.6...

CVE-2026-121771 WordPress Gutenberg Blocks plugin <= 3.7.6 - Sensitive Data Exposure vulnerability

Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

CVE-2026-121771

The PublishPress Gutenberg Blocks (advanced-gutenberg) plugin for WordPress is vulnerable to a Sensitive Data Exposure vulnerability (CWE-201) in versions up to and including 3.7.6 . This flaw allows an attacker to retrieve embedded sensitive data that is inserted into sent data. No specific expl...

EUVD-2026-125282

Insertion of Sensitive Information Into Sent Data vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Retrieve Embedded Sensitive Data.This issue affects Gutenberg Blocks: from n/a through 3.7.6...

WordPress Gutenberg Blocks plugin <= 3.7.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Malvin Valerian Gultom in WordPress Plugin Gutenberg Blocks versions = 3.7.6...

CVE-2026-116615

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 4.2.6.1 via the postcontent parameter. This is due to asymmetric parsing between the save-time strip filter...

EUVD-2026-124976

The Widget Options – Advanced Conditional Visibility for Gutenberg Blocks & Classic Widgets plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 4.2.6.1 via the postcontent parameter. This is due to asymmetric parsing between the save-time strip filter...