EUVD-2025-4552

Malicious code in bioql PyPI...

WordPress C9 Blocks plugin <= 1.7.7 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin C9 Blocks versions = 1.7.7...

CVE-2024-13537

The C9 Blocks plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.7.7. This is due the plugin containing a publicly accessible composer-setup.php file with error display enabled. This makes it possible for unauthenticated attackers to retrieve the fu...

CVE-2024-13537

The C9 Blocks plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.7.7. This is due the plugin containing a publicly accessible composer-setup.php file with error display enabled. This makes it possible for unauthenticated attackers to retrieve the fu...

PT-2025-7367

Name of the Vulnerable Software and Affected Versions C9 Blocks plugin for WordPress versions up to, and including, 1.7.7 Description The issue is related to Full Path Disclosure, which occurs due to the presence of a publicly accessible composer-setup.php file with error display enabled. This...

WordPress C9 Blocks plugin <= 1.7.7 - Unauthenticated Full Path Disclosure vulnerability

Unauthenticated Full Path Disclosure vulnerability discovered by stealthcopter in WordPress Plugin C9 Blocks versions = 1.7.7...