6736 matches found
CVE-2025-5844 Radius Blocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via subHeadingTagName Parameter
The Radius Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘subHeadingTagName’ parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress B Blocks plugin missing authorization vulnerability
WordPress B Blocks plugin is a Gutenberg plugin for WordPress to enhance page editing features. It provides a variety of beautiful blocks such as buttons, sliders, etc., supports highly customizable designs such as fonts, colors, spacing, etc., and includes pre-designed themes and icon libraries...
WordPress plugin Radius Blocks 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
PT-2025-33457 · WordPress · Radius Blocks
Name of the Vulnerable Software and Affected Versions: Radius Blocks plugin for WordPress versions up to and including 2.2.1 Description: The Radius Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the subHeadingTagName parameter due to insufficient input sanitization...
CVE-2025-5844: Improper Neutralization of Input During Web Page Generation
The Radius Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘subHeadingTagName’ parameter in all versions up to, and including, 2.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...
WordPress Radius Blocks plugin <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via subHeadingTagName Parameter vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting via subHeadingTagName Parameter vulnerability discovered by Peter Thaleikis in WordPress Plugin Radius Blocks versions = 2.2.1...
CVE-2025-54739
Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nexter Blocks: from n/a through = 4.5.4...
CVE-2025-54708
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows DOM-Based XSS.This issue affects B Blocks: from n/a through = 2.0.5...
Malicious code in src.collection-bb-blocks (npm)
The package src.collection-bb-blocks was found to contain malicious code...
MAL-2025-17283 Malicious code in collection-bb-blocks (npm)
The package collection-bb-blocks was found to contain malicious code...
Malicious code in @malware-test-bocks-pagod/test-mlw3-bocks-pagod (npm)
The package @malware-test-bocks-pagod/test-mlw3-bocks-pagod was found to contain malicious code...
MAL-2025-33861 Malicious code in src.collection-bb-blocks (npm)
The package src.collection-bb-blocks was found to contain malicious code...
Malicious code in collection-bb-blocks (npm)
The package collection-bb-blocks was found to contain malicious code...
CVE-2025-54708 WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows DOM-Based XSS.This issue affects B Blocks: from n/a through = 2.0.5...
CVE-2025-54708
The CVE-2025-54708 entry concerns the WordPress plugin B Blocks (bPlugins B Blocks) with versions up to and including 2.0.5. The connected sources confirm a DOM-based Cross-Site Scripting (XSS) vulnerability caused by improper neutralization of input during web page generation, allowing execution...
CVE-2025-54708 WordPress B Blocks Plugin <= 2.0.5 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins B Blocks b-blocks allows DOM-Based XSS.This issue affects B Blocks: from n/a through = 2.0.5...
CVE-2025-54739 WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control Vulnerability
Missing Authorization vulnerability in POSIMYTH Nexter Blocks the-plus-addons-for-block-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Nexter Blocks: from n/a through = 4.5.4...
CVE-2025-54739 WordPress Nexter Blocks Plugin <= 4.5.4 - Broken Access Control Vulnerability
Missing Authorization vulnerability in POSIMYTH Nexter Blocks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Nexter Blocks: from n/a through 4.5.4...
CVE-2025-54739
CVE-2025-54739 describes a Missing Authorization (Broken Access Control) vulnerability affecting Nexter Blocks (POSIMYTH) up to version 4.5.4. The issue stems from incorrectly configured access control; CVSS v3.1 base score 5.3 (Medium). Connected sources indicate patching status exists (patched)...