Lucene search
K

11 matches found

CNNVD
CNNVD
added 2026/03/02 12:0 a.m.2 views

WordPress plugin Blocksy 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.7AI score0.00043EPSS
Exploits0References2
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.0 views

WordPress plugin Blocksy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.9CVSS6.1AI score0.00199EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/01/02 12:0 a.m.1 views

WordPress plugin Blocksy 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

8.8CVSS6.7AI score0.00097EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/05 12:0 a.m.1 views

WordPress plugin Blocksy 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS7.5AI score0.00201EPSS
Exploits0References2
Patchstack
Patchstack
added 2024/12/04 10:50 p.m.5 views

WordPress Blocksy plugin <= 2.0.77 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Theme Blocksy versions = 2.0.77...

6.4CVSS5.8AI score0.00201EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/21 12:0 a.m.1 views

WordPress Plugin Blocksy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

6.4CVSS5.7AI score0.00201EPSS
Exploits0References3
WPVulnDB
WPVulnDB
added 2024/05/03 12:0 a.m.26 views

Blocksy < 2.0.34 - Contributor+ Stored XSS

Description The plugin does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin...

6.5CVSS6.1AI score0.0021EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2024/05/02 12:0 a.m.1 views

WordPress Plugin Blocksy 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A cross-site scripting...

6.4CVSS5.9AI score0.00196EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/04/15 12:0 a.m.1 views

WordPress Plugin Blocksy 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

8.8CVSS6.4AI score0.00187EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/02/08 12:0 a.m.3 views

WordPress Plugin Blocksy Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in the...

6.5CVSS6.1AI score0.00065EPSS
Exploits0References2
Prion
Prion
added 2023/05/02 8:15 a.m.9 views

Design/Logic Flaw

The Blocksy Companion WordPress plugin before 1.8.82 does not ensure that posts to be accessed via a shortcode are already public and can be viewed, allowing any authenticated users, such as subscriber to access draft posts for example...

4CVSS4.4AI score0.00186EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder