Lucene search
+L

6709 matches found

CVE
CVE
•added 2025/10/22 2:32 p.m.•27 views

CVE-2025-62063

CVE-2025-62063 is a cross-site scripting vulnerability in the WordPress plugin WP Travel Gutenberg Blocks (affected: versions ≤ 3.9.2). The issue stems from improper input neutralization during web page generation, enabling XSS. Public references in Wordfence Intelligence and PatchStack confirm t...

6.5CVSS5.8AI score0.00176EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•11 views

CVE-2025-62019 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.8...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/10/22 2:32 p.m.•30 views

CVE-2025-62019 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.8...

6.5CVSS0.00258EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•47 views

CVE-2025-62019

CVE-2025-62019 concerns a Missing Authorization vulnerability in the WordPress plugin “Recipe Card Blocks for Gutenberg & Elementor” (versions up to and including 3.4.8). The connected documents identify a Broken/Missing Access control issue that could affect how authenticated users interact with...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/22 2:32 p.m.•28 views

CVE-2025-49929

Summary: WordPress plugin Ultimate Blocks (versions up to 3.3.6) is affected by a stored XSS vulnerability caused by improper input neutralization during web page generation. Affected software: Ultimate Blocks plugin for WordPress, до version 3.3.6. Impact (as stated): Stored Cross-Site Scripting...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/10/22 2:32 p.m.•13 views

CVE-2025-49929 WordPress Ultimate Blocks plugin <= 3.3.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ultimate Blocks Ultimate Blocks ultimate-blocks allows Stored XSS.This issue affects Ultimate Blocks: from n/a through = 3.3.6...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•5 views

PT-2025-43339

Name of the Vulnerable Software and Affected Versions WPZOOM Recipe Card Blocks for Gutenberg & Elementor versions through 3.4.8 Description A missing authorization flaw exists in WPZOOM Recipe Card Blocks for Gutenberg & Elementor. The issue could allow unauthorized access to resources. There is...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•17 views

WordPress plugin Recipe Card Blocks for Gutenberg & Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•18 views

WordPress Plugin Ultimate Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

6.5CVSS5.9AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•26 views

PT-2025-43193

Name of the Vulnerable Software and Affected Versions Ultimate Blocks versions through 3.3.6 Description The software contains a flaw related to improper input handling during web page creation, which can lead to Cross-site Scripting XSS. This allows for the injection of malicious scripts into we...

6.5CVSS6.3AI score0.00223EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•5 views

CVE-2025-49929: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ultimate Blocks Ultimate Blocks ultimate-blocks allows Stored XSS.This issue affects Ultimate Blocks: from n/a through = 3.3.6...

6.5CVSS5.8AI score0.00223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/10/22 12:00 a.m.•3 views

PT-2025-43357

Name of the Vulnerable Software and Affected Versions WP Travel Gutenberg Blocks versions through 3.9.2 Description The software contains a flaw due to improper neutralization of input during web page generation, which may allow for cross-site scripting. Recommendations Update WP Travel Gutenberg...

6.5CVSS5.7AI score0.00176EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•2 views

CVE-2025-62063: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Travel WP Travel Gutenberg Blocks wp-travel-blocks.This issue affects WP Travel Gutenberg Blocks: from n/a through = 3.9.2...

6.5CVSS5.8AI score0.00176EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•15 views

WordPress plugin WP Travel Gutenberg Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

6.5CVSS5.6AI score0.00176EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/22 12:00 a.m.•8 views

CVE-2025-62019: Missing Authorization

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.8...

6.5CVSS5.8AI score0.00258EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/22 12:00 a.m.•24 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from allowing memory blocks to be resized before linear mapping is ready, potentially leading to page faults...

5.9AI score0.00214EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/10/22 12:00 a.m.•11 views

Golang 1.24.x < 1.24.8 / 1.25.x < 1.25.2 Multiple Vulnerabilities (qZN5nc-mBgAJ)

The version of Golang running on the remote host is 1.24.x prior to 1.24.8, 1.25.x prior to 1.25.2. It is, therefore, affected by multiple vulnerabilities as referenced in qZN5nc-mBgAJ advisory. - The Parse function permitted values other than IPv6 addresses to be included in square brackets with...

7.5CVSS6.8AI score0.00661EPSS
SaveExploits0References21
EUVD
EUVD
•added 2025/10/21 12:31 p.m.•20 views

EUVD-2022-54869

In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to do sanity check on totaldatablocks As Yanming reported in bugzilla: https://bugzilla.kernel.org/showbug.cgi?id=215916 The kernel message is shown below: kernel BUG at fs/f2fs/segment.c:2560! Call Trace:...

5.5CVSS5.8AI score0.00261EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2025/10/19 6:43 a.m.•28 views

CVE-2025-11270

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS6.1AI score0.00254EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/10/19 4:37 a.m.•34 views

CVE-2025-11361

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.7.1 via the ebsaveaigeneratedimage function. This makes it possible for authenticated attackers, with Author-leve...

6.4CVSS5.9AI score0.00301EPSS
SaveExploits0References1
Rows per page
Query Builder