Lucene search
+L

1933 matches found

Patchstack
Patchstack
•added 2025/12/31 12:00 a.m.•21 views

WordPress SKT Blocks - Gutenberg based Page Builder plugin <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

WordPress SKT Blocks - Gutenberg based Page Builder plugin = 1.7 - Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zaim in WordPress Plugin SKT Blocks versions = 1.7...

6.4CVSS5.4AI score0.00306EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/25 1:23 p.m.•14 views

CVE-2025-68605

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.23...

6.5CVSS5.9AI score0.00159EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/24 3:30 p.m.•15 views

EUVD-2025-205231

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.18...

5.4CVSS5.5AI score0.00159EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/24 1:16 p.m.•15 views

CVE-2025-68605

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.23...

6.5CVSS0.00159EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/24 1:10 p.m.•11 views

CVE-2025-68605 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.23...

6.5CVSS5.8AI score0.00159EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/24 1:10 p.m.•57 views

CVE-2025-68605 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.23...

6.5CVSS0.00159EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/24 1:10 p.m.•29 views

CVE-2025-68605

CVE-2025-68605 concerns the WordPress Post Grid and Post Grid Gutenberg Blocks. The connected Wordfence details confirm a Stored XSS issue in Post Grid and Gutenberg Blocks versions up to 2.3.x (the CVE entry references 2.3.21 as a ceiling in the vulnerability listing). The description indicates ...

6.5CVSS5.8AI score0.00159EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/24 12:00 a.m.•14 views

WordPress plugin Post Grid and Gutenberg Blocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS5.9AI score0.00159EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/12/24 12:00 a.m.•19 views

PT-2025-53292

Name of the Vulnerable Software and Affected Versions PickPlugins Post Grid and Gutenberg Blocks versions through 2.3.18 Description The Post Grid and Gutenberg Blocks software contains a flaw due to improper input neutralization during web page generation, leading to a potential cross-site...

5.4CVSS5.2AI score0.00159EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/24 12:00 a.m.•5 views

CVE-2025-68605: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Stored XSS.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.23...

6.5CVSS5.8AI score0.00159EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2025/12/21 1:59 a.m.•15 views

WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Post Grid and Gutenberg Blocks versions = 2.3.23...

5.4CVSS5.9AI score0.00159EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
•added 2025/12/19 5:22 p.m.•28 views

CVE-2025-63043

Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.23...

5.3CVSS5.9AI score0.00241EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/12/19 4:23 p.m.•20 views

CVE-2025-66058

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.17...

6.5CVSS5.9AI score0.00238EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/18 6:30 p.m.•16 views

EUVD-2025-204298

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through 2.3.17...

6.5CVSS6.5AI score0.00238EPSS
SaveExploits0References2
NVD
NVD
•added 2025/12/18 5:15 p.m.•18 views

CVE-2025-66058

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.17...

6.5CVSS0.00238EPSS
SaveExploits0References1
NVD
NVD
•added 2025/12/18 5:15 p.m.•19 views

CVE-2025-63043

Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.23...

5.3CVSS0.00241EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/18 4:45 p.m.•41 views

CVE-2025-63043 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.23 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks post-grid allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through = 2.3.23...

5.3CVSS0.00241EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/18 4:45 p.m.•9 views

CVE-2025-63043 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.19 - Insecure Direct Object References (IDOR) vulnerability

Authorization Bypass Through User-Controlled Key vulnerability in PickPlugins Post Grid and Gutenberg Blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through 2.3.19...

5.3CVSS6AI score0.00241EPSS
SaveExploits0References1
CVE
CVE
•added 2025/12/18 4:45 p.m.•34 views

CVE-2025-63043

CVE-2025-63043 is an IDOR-by-auth bypass in the WordPress Post Grid and Gutenberg Blocks plugin (versions up to 2.3.19 as reported). The vulnerability arises from authorization by a user-controlled key, enabling access control bypass to restricted objects. Several connected sources confirm the af...

5.3CVSS6AI score0.00241EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/12/18 4:15 p.m.•6 views

CVE-2025-66058 WordPress Post Grid and Gutenberg Blocks plugin <= 2.3.17 - Broken Access Control vulnerability

Missing Authorization vulnerability in PickPlugins Post Grid and Gutenberg Blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Grid and Gutenberg Blocks: from n/a through 2.3.17...

6.5CVSS6AI score0.00238EPSS
SaveExploits0References1
Rows per page
Query Builder