CVE-2026-25438

The CVE describes a Reflected XSS in the WordPress Gutenberg Blocks “Unlimited blocks for Gutenberg” plugin, affecting versions up to and including 1.2.8. The root cause is improper neutralization of input during web page generation. The affected component is the WordPress Gutenberg Blocks integr...

PT-2024-30916 · WordPress · Gutenberg Blocks – Unlimited Blocks For Gutenberg

Name of the Vulnerable Software and Affected Versions: Gutenberg Blocks – Unlimited blocks For Gutenberg versions 1.2.7 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS...