16 matches found
CVE-2026-12157
The BetterDocs - Knowledge Base Docs & FAQ Solution for Elementor & Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId attribute of the betterdocs/category-slate-layout Gutenberg block in versions up to, and including, 4.5.3. This is due to insufficient...
CVE-2026-12157 BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute
The BetterDocs - Knowledge Base Docs & FAQ Solution for Elementor & Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId attribute of the betterdocs/category-slate-layout Gutenberg block in versions up to, and including, 4.5.3. This is due to insufficient...
CVE-2026-12157 BetterDocs <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'blockId' Block Attribute
The BetterDocs - Knowledge Base Docs & FAQ Solution for Elementor & Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId attribute of the betterdocs/category-slate-layout Gutenberg block in versions up to, and including, 4.5.3. This is due to insufficient...
CVE-2026-12157: Improper Neutralization of Input During Web Page Generation
The BetterDocs - Knowledge Base Docs & FAQ Solution for Elementor & Block Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId attribute of the betterdocs/category-slate-layout Gutenberg block in versions up to, and including, 4.5.3. This is due to insufficient...
CVE-2026-4658
The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the className, classHook, and blockId attributes in the Add to Cart block essential-blocks/add-to-cart in all versions up to, and including, 6.0.4. This...
CVE-2026-4658: Improper Neutralization of Input During Web Page Generation
The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the className, classHook, and blockId attributes in the Add to Cart block essential-blocks/add-to-cart in all versions up to, and including, 6.0.4. This...
CVE-2025-60511
Moodle OpenAI Chat Block plugin 3.0.1 2025021700 suffers from an Insecure Direct Object Reference IDOR vulnerability due to insufficient validation of the blockId parameter in /blocks/openaichat/api/completion.php. An authenticated student can impersonate another user's block e.g., administrator...
CVE-2025-60511: Authorization Bypass Through User-Controlled Key
Moodle OpenAI Chat Block plugin 3.0.1 2025021700 suffers from an Insecure Direct Object Reference IDOR vulnerability due to insufficient validation of the blockId parameter in /blocks/openaichat/api/completion.php. An authenticated student can impersonate another user's block e.g., administrator...
PT-2025-42911
Name of the Vulnerable Software and Affected Versions Moodle OpenAI Chat Block plugin version 3.0.1 2025021700 Description The Moodle OpenAI Chat Block plugin is affected by an Insecure Direct Object Reference IDOR issue. Insufficient validation of the blockId parameter in the '/blocks/openai...
Malicious code in sap-blockid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6551ab7a37c2bd56c5d68bcd602f25137a432173524ab67e42a7dc9fa8008f1c The OpenSSF Package Analysis project identified 'sap-blockid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
MAL-2024-7626 Malicious code in sap-blockid (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6551ab7a37c2bd56c5d68bcd602f25137a432173524ab67e42a7dc9fa8008f1c The OpenSSF Package Analysis project identified 'sap-blockid' @ 0.0.0 npm as malicious. It is considered malicious because: - The package...
CVE-2024-1854
The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId parameter in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for...
PT-2024-18364 · WordPress · The Essential Blocks – Page Builder Gutenberg Blocks
Name of the Vulnerable Software and Affected Versions: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress versions up to, and including, 4.5.1 Description: The issue is related to Stored Cross-Site Scripting via the blockId parameter due to insufficien...
CVE-2024-1854: Improper Input Validation
The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId parameter in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for...
CVE-2018-19552: Improper Neutralization of Special Elements used in an SQL Command
Interspire Email Marketer through 6.1.6 has SQL Injection via a deleteblock blockid request to Dynamiccontenttags.php...
PT-2018-14997
Name of the Vulnerable Software and Affected Versions Interspire Email Marketer versions prior to 6.1.7 Description The issue concerns a SQL injection flaw. It can be exploited via a deleteblock blockid request to the "Dynamiccontenttags.php" API endpoint. Recommendations For versions prior to...