Lucene search
K

10 matches found

Patchstack
Patchstack
added 2026/02/02 7:56 p.m.2 views

WordPress Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks plugin <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

WordPress Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks plugin = 2.2.80 - Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Post Grid and Gutenberg Blocks versions = 2.2.80...

6.4CVSS5.3AI score0.0031EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2025/01/24 6:15 p.m.12 views

CVE-2025-24739

Cross-Site Request Forgery CSRF vulnerability in Shahjahan Jewel FluentSMTP fluent-smtp allows Cross Site Request Forgery.This issue affects FluentSMTP: from n/a through = 2.2.80...

4.3CVSS0.0013EPSS
Exploits0References1
Patchstack
Patchstack
added 2025/01/24 11:47 a.m.2 views

WordPress FluentSMTP plugin <= 2.2.80 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin FluentSMTP versions = 2.2.80...

4.3CVSS7AI score0.0013EPSS
Exploits0Affected Software1
CNNVD
CNNVD
added 2025/01/24 12:0 a.m.1 views

WordPress plugin FluentSMTP 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request...

4.3CVSS8.6AI score0.0013EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/01/24 12:0 a.m.2 views

PT-2025-5551 · Unknown · Fluentsmtp

Name of the Vulnerable Software and Affected Versions: FluentSMTP versions 2.2.80 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For FluentSMTP versions 2.2.80 an...

4.3CVSS7AI score0.0013EPSS
Exploits0References4
OSV
OSV
added 2024/06/07 4:15 a.m.1 views

CVE-2024-1988

The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tag' attribute in blocks in all versions up to, and including, 2.2.80 due to insufficient input sanitization and output...

5.4CVSS5.9AI score0.0031EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/06/07 12:0 a.m.2 views

WordPress plugin Combo Blocks security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

6.4CVSS6.1AI score0.0031EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/06/06 12:0 a.m.1 views

PT-2024-28840 · WordPress · Post Blocks +5

Name of the Vulnerable Software and Affected Versions: Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress versions up to, and including, 2.2.80 Description: The issue is related to Stored Cross-Site Scripting via the class...

6.4CVSS5.9AI score0.0031EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/06/06 12:0 a.m.3 views

PT-2024-18476 · WordPress · Post Blocks +5

Name of the Vulnerable Software and Affected Versions: The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress versions up to, and including, 2.2.80 Description: The issue is related to Stored Cross-Site Scripting via the tag...

6.4CVSS5.8AI score0.0031EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2024/05/21 12:0 a.m.2 views

PT-2024-24136 · WordPress · Post Blocks +5

Name of the Vulnerable Software and Affected Versions: Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress versions up to, and including, 2.2.80 Description: The issue is related to Stored Cross-Site Scripting due to insufficient...

6.4CVSS6AI score0.00263EPSS
Exploits0References6
Rows per page
Query Builder