Lucene search
+L

6903 matches found

Cvelist
Cvelist
•added 2025/04/15 9:53 p.m.•37 views

CVE-2025-26951 WordPress C9 Blocks plugin <= 1.7.7 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in covertnine C9 Blocks c9-blocks allows DOM-Based XSS.This issue affects C9 Blocks: from n/a through = 1.7.7...

6.5CVSS0.00274EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/04/15 9:53 p.m.•10 views

CVE-2025-26998 WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through = 1.8...

6.5CVSS8.6AI score0.00276EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/04/15 9:53 p.m.•29 views

CVE-2025-26998 WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through = 1.8...

6.5CVSS0.00276EPSS
SaveExploits0References1
CVE
CVE
•added 2025/04/15 9:53 p.m.•78 views

CVE-2025-26998

CVE-2025-26998 is a Stored XSS vulnerability in the SKT Blocks – Gutenberg based Page Builder. The issue affects SKT Blocks versions from 1.0 through 1.8 (up to 1.8) and is triggered during web page generation. Wordfence data from the connected document indicates that this vulnerability has been ...

6.5CVSS7.2AI score0.00276EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•13 views

WordPress plugin SKT Blocks – Gutenberg-based Page Builder: Cross-site scripting vulnerability

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in PHP. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin SKT Blocks - Gutenbe...

6.5CVSS6.5AI score0.00276EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/04/15 12:00 a.m.•20 views

WordPress plugin C9 Blocks has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripti...

6.5CVSS6.7AI score0.00274EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•15 views

PT-2025-16524 · Unknown · Covertnine C9 Blocks

Name of the Vulnerable Software and Affected Versions: covertnine C9 Blocks versions 1.7.7 and earlier Description: The issue is related to improper neutralization of input during web page generation, which allows for DOM-Based XSS. This is a type of Cross-site Scripting attack that occurs in the...

6.5CVSS6.6AI score0.00274EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/04/15 12:00 a.m.•17 views

PT-2025-16527 · Unknown · Skt Blocks

Name of the Vulnerable Software and Affected Versions: SKT Blocks – Gutenberg based Page Builder versions 1.8 and earlier Description: The issue is related to improper neutralization of input during web page generation, also known as Cross-site Scripting. This allows for Stored XSS attacks...

6.5CVSS6.7AI score0.00276EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•7 views

CVE-2025-26998: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through = 1.8...

6.5CVSS5.8AI score0.00276EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/15 12:00 a.m.•7 views

CVE-2025-26951: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in covertnine C9 Blocks c9-blocks allows DOM-Based XSS.This issue affects C9 Blocks: from n/a through = 1.7.7...

6.5CVSS5.8AI score0.00274EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/04/14 2:00 p.m.•20 views

WordPress SKT Blocks plugin <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Peter Thaleikis in WordPress Plugin SKT Blocks versions = 1.9...

6.4CVSS6.3AI score0.00229EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2025/04/14 7:05 a.m.•35 views

CVE-2025-3276

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS6AI score0.00229EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/04/14 12:00 a.m.•17 views

PT-2025-22192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the btrfs file system. The issue occurs when running machines with a 64k page size and a 16k nodesize, causing tree log...

7.3CVSS6.7AI score0.00218EPSS
SaveExploits0
NVD
NVD
•added 2025/04/12 7:15 a.m.•43 views

CVE-2025-3276

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS0.00229EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/04/12 7:15 a.m.•18 views

CVE-2025-3276

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

5.4CVSS5.9AI score0.00229EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/12 6:37 a.m.•98 views

CVE-2025-3276

CVE-2025-3276 (SKT Blocks – Gutenberg based Page Builder, WordPress): Stored Cross-Site Scripting in the Post Carousel block affects all versions up to 1.9. The root cause is insufficient input sanitization and output escaping, allowing an authenticated attacker (Contributor level or higher) to i...

6.4CVSS5.8AI score0.00229EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2025/04/12 6:37 a.m.•13 views

CVE-2025-3276 SKT Blocks – Gutenberg based Page Builder <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS5.9AI score0.00229EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/04/12 6:37 a.m.•49 views

CVE-2025-3276 SKT Blocks – Gutenberg based Page Builder <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wit...

6.4CVSS0.00229EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/04/12 12:00 a.m.•16 views

PT-2025-16166 · WordPress · Skt Blocks

Name of the Vulnerable Software and Affected Versions: The SKT Blocks – Gutenberg based Page Builder plugin for WordPress versions up to, and including, 1.9 Description: The issue is related to Stored Cross-Site Scripting via the Post Carousel block due to insufficient input sanitization and outp...

6.4CVSS6.2AI score0.00229EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2025/04/12 12:00 a.m.•17 views

WordPress plugin SKT Blocks has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS6.7AI score0.00229EPSS
SaveExploits0References4
Rows per page
Query Builder