Lucene search
+L

6937 matches found

Cvelist
Cvelist
•added 2025/01/24 5:25 p.m.•43 views

CVE-2025-24753 WordPress Kadence Blocks plugin <= 3.3.1 - Broken Access Control vulnerability

Missing Authorization vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through = 3.3.1...

4.3CVSS0.00404EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/24 5:25 p.m.•48 views

CVE-2025-24696 WordPress Gutenberg Blocks and Page Layouts Plugin <= 1.9.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in Shafaet Alam Attire Blocks attire-blocks allows Cross Site Request Forgery.This issue affects Attire Blocks: from n/a through = 1.9.6...

4.3CVSS0.00213EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/24 5:25 p.m.•74 views

CVE-2025-24696

CVE-2025-24696 is a CSRF vulnerability in the WP Attire Attire Blocks Gutenberg blocks, affecting versions up to 1.9.6. The available connected sources confirm the issue, its CSRF nature, and the affected plugin family, with one source indicating the vulnerability has been patched, but no specifi...

4.3CVSS7.2AI score0.00213EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/24 5:25 p.m.•13 views

CVE-2025-24696 WordPress Gutenberg Blocks and Page Layouts Plugin <= 1.9.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in WP Attire Attire Blocks allows Cross Site Request Forgery. This issue affects Attire Blocks: from n/a through 1.9.6...

4.3CVSS4.7AI score0.00213EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/24 5:25 p.m.•35 views

CVE-2025-24712 WordPress Radius Blocks – WordPress Gutenberg Blocks Plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in RadiusTheme Radius Blocks radius-blocks allows Cross Site Request Forgery.This issue affects Radius Blocks: from n/a through = 2.1.2...

5.4CVSS0.00207EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/24 5:25 p.m.•74 views

CVE-2025-24712

The CVE is CVE-2025-24712: Radius Blocks (WordPress Gutenberg Blocks) is affected up to and including version 2.1.2 and earlier. A Cross-Site Request Forgery (CSRF) vulnerability could allow unauthorized actions on a user’s account. The provided data confirms the CSRF root cause and affected rang...

5.4CVSS7.2AI score0.00207EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/01/24 5:25 p.m.•13 views

CVE-2025-24712 WordPress Radius Blocks – WordPress Gutenberg Blocks Plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability in RadiusTheme Radius Blocks allows Cross Site Request Forgery. This issue affects Radius Blocks: from n/a through 2.1.2...

5.4CVSS6.9AI score0.00207EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/01/24 11:47 a.m.•18 views

WordPress Gutenberg Blocks and Page Layouts Plugin <= 1.9.6 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Abdi Pranata Patchstack Alliance in WordPress Plugin Attire Blocks versions = 1.9.6...

4.3CVSS7AI score0.00213EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/24 11:47 a.m.•16 views

WordPress Radius Blocks – WordPress Gutenberg Blocks Plugin <= 2.1.2 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Tran Nguyen Bao Khanh in WordPress Plugin Radius Blocks versions = 2.1.2...

5.4CVSS7AI score0.00207EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
•added 2025/01/24 11:47 a.m.•19 views

WordPress Kadence Blocks plugin <= 3.3.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Gutenberg Blocks by Kadence Blocks versions = 3.3.1...

8.8CVSS7AI score0.00404EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•23 views

PT-2025-5512 · WordPress · Wp Attire Attire Blocks

Name of the Vulnerable Software and Affected Versions: WP Attire Attire Blocks versions 1.9.6 and earlier Description: A Cross-Site Request Forgery CSRF issue allows unauthorized actions to be performed on behalf of a user. This can lead to various security problems, including data modification o...

4.3CVSS7AI score0.00213EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•8 views

CVE-2025-24696: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Shafaet Alam Attire Blocks attire-blocks allows Cross Site Request Forgery.This issue affects Attire Blocks: from n/a through = 1.9.6...

4.3CVSS5.8AI score0.00213EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•17 views

WordPress plugin Gutenberg Blocks by Kadence Blocks has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in th...

8.8CVSS8.3AI score0.00404EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•23 views

PT-2025-5526 · Unknown · Radius Blocks

Name of the Vulnerable Software and Affected Versions: Radius Blocks versions 2.1.2 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. Recommendations: For versions 2.1.2 and earlier,...

5.4CVSS7AI score0.00207EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•16 views

WordPress plugin Radius Blocks has a cross-site request forgeing vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

5.4CVSS8.6AI score0.00207EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/01/24 12:00 a.m.•19 views

WordPress plugin Attire Blocks has a cross-site request fraud vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

4.3CVSS8.5AI score0.00213EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•5 views

CVE-2025-24712: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in RadiusTheme Radius Blocks radius-blocks allows Cross Site Request Forgery.This issue affects Radius Blocks: from n/a through = 2.1.2...

5.4CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/24 12:00 a.m.•8 views

CVE-2025-24753: Missing Authorization

Missing Authorization vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through = 3.3.1...

8.8CVSS5.9AI score0.00404EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/24 12:00 a.m.•19 views

PT-2025-5562 · Kadence Blocks · Kadence Wp Gutenberg Blocks

Name of the Vulnerable Software and Affected Versions: Kadence WP Gutenberg Blocks by Kadence Blocks versions 3.3.1 and earlier Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendation...

8.8CVSS7.1AI score0.00404EPSS
SaveExploits0References5
NVD
NVD
•added 2025/01/22 3:15 p.m.•15 views

CVE-2025-23948

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Webarea Background animation blocks background-animation-blocks allows PHP Local File Inclusion.This issue affects Background animation blocks: from n/a through = 2.1.5...

8.1CVSS0.00912EPSS
SaveExploits0References1
Rows per page
Query Builder