EUVD-2025-2807

Malicious code in bioql PyPI...

CVE-2025-22529

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordpresteem WE Blocks we-blocks allows Stored XSS.This issue affects WE Blocks: from n/a through = 1.3.5...

CVE-2025-22529

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordpresteem WE Blocks we-blocks allows Stored XSS.This issue affects WE Blocks: from n/a through = 1.3.5...

CVE-2025-22529 WordPress WE Blocks <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WORDPRESTEEM WE Blocks allows Stored XSS.This issue affects WE Blocks: from n/a through 1.3.5...

CVE-2025-22529

CVE-2025-22529 corresponds to a Stored XSS in the WordPress plugin WE Blocks (Image, Testimonial and Logo Slider Gutenberg Blocks). Affected version range: WE Blocks from n/a up to 1.3.5. The core details and CVSS indicate MEDIUM severity (CVSS 3.1: 6.5) with network attack vector, low privileges...

CVE-2025-22529 WordPress WE Blocks <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wordpresteem WE Blocks we-blocks allows Stored XSS.This issue affects WE Blocks: from n/a through = 1.3.5...

WordPress WE Blocks <= 1.3.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by zaim Patchstack Alliance in WordPress Plugin WE Blocks versions = 1.3.5...

WordPress plugin WE Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-4520 · WordPress · Wordpresteem We Blocks

Name of the Vulnerable Software and Affected Versions: WORDPRESTEEM WE Blocks versions 1.3.5 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject...