WordPress Convert Classic Editor to Gutenberg Blocks plugin <= 1.0.6 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Convert Classic Editor to Gutenberg Blocks plugin versions = 1.0.6. Solution No patched version available...

WordPress Master Blocks – Gutenberg Site Builder plugin <= 1.0.4 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Master Blocks – Gutenberg Site Builder plugin versions = 1.0.4. Solution No patched version available...

WordPress Extreme Blocks plugin < 0.8.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Extreme Blocks plugin versions 0.8.1. Solution Update the WordPress Extreme Blocks plugin to the latest available version at least 0.8.1...

WordPress WP Munich Blocks – Gutenberg Blocks for WordPress plugin < 0.11.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WP Munich Blocks – Gutenberg Blocks for WordPress plugin versions 0.11.0. Solution Update the WordPress WP Munich Blocks – Gutenberg Blocks for WordPress plugin to the latest available version at least 0.11.0...

WordPress Ultimate Blocks – Gutenberg Blocks Plugin plugin < 2.4.13 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Ultimate Blocks – Gutenberg Blocks Plugin plugin versions 2.4.13. Solution Update the WordPress Ultimate Blocks – Gutenberg Blocks Plugin plugin to the latest available version at least 2.4.13...

WordPress Mobile blocks plugin <= 1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Mobile blocks plugin versions = 1.2. Solution Update the WordPress Mobile blocks plugin to the latest available version at least 1.2.1...

WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin <= 1.3.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin versions = 1.3.9. Solution No patched version available...

WordPress Stackable – Page Builder Gutenberg Blocks plugin < 3.1.5 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Stackable – Page Builder Gutenberg Blocks plugin versions 3.1.5. Solution Update the WordPress Stackable – Page Builder Gutenberg Blocks plugin to the latest available version at least 3.1.5...

WordPress Local SEO For Divi & Gutenberg Blocks plugin <= 9.1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Local SEO For Divi & Gutenberg Blocks plugin versions = 9.1.2. Solution Update the WordPress Local SEO For Divi & Gutenberg Blocks plugin to the latest available version at least 9.1.3...

WordPress Local SEO For Divi & Gutenberg Blocks plugin <= 9.1.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Local SEO For Divi & Gutenberg Blocks plugin versions = 9.1.2. Solution Update the WordPress Local SEO For Divi & Gutenberg Blocks plugin to the latest available version at least 9.1.3...

WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin <= 1.3.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Page Builder Gutenberg Blocks – Kioken Blocks plugin versions = 1.3.9. Solution No patched version available...

WordPress Stackable – Page Builder Gutenberg Blocks plugin < 3.1.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Stackable – Page Builder Gutenberg Blocks plugin versions 3.1.5. Solution Update the WordPress Stackable – Page Builder Gutenberg Blocks plugin to the latest available version at least 3.1.5...

WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.7 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Gutenberg Blocks – ACF Blocks Suite plugin versions = 2.6.7. Solution Update the WordPress Gutenberg Blocks – ACF Blocks Suite plugin to the latest available version at least 2.6.8...

WordPress One Page Blocks plugin <= 1.0.0 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress One Page Blocks plugin versions = 1.0.0. Solution No patched version available...

WordPress Master Blocks – Gutenberg Site Builder plugin <= 1.0.4 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Master Blocks – Gutenberg Site Builder plugin versions = 1.0.4. Solution No patched version available...

WordPress Gutenberg Blocks – ACF Blocks Suite plugin <= 2.6.7 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Gutenberg Blocks – ACF Blocks Suite plugin versions = 2.6.7. Solution Update the WordPress Gutenberg Blocks – ACF Blocks Suite plugin to the latest available version at least 2.6.8...

WordPress Extreme Blocks plugin < 0.8.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Extreme Blocks plugin versions 0.8.1. Solution Update the WordPress Extreme Blocks plugin to the latest available version at least 0.8.1...

WordPress Mobile blocks plugin <= 1.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Mobile blocks plugin versions = 1.2. Solution Update the WordPress Mobile blocks plugin to the latest available version at least 1.2.1...

WordPress Convert Classic Editor to Gutenberg Blocks plugin <= 1.0.6 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Convert Classic Editor to Gutenberg Blocks plugin versions = 1.0.6. Solution No patched version available...

The vulnerability lies in the implementation of the edit_posts permission plugin for PHP code, which allows a hacker to execute arbitrary code.

The vulnerability of the editposts permission implementation in the PHP plugin for PHP Everywhere is related to incorrect code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using Götterhuber blocks...