CVE-2025-24751

Missing Authorization vulnerability in GoDaddy CoBlocks coblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoBlocks: from n/a through = 3.1.13...

CVE-2025-24751

Missing Authorization vulnerability in GoDaddy CoBlocks coblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoBlocks: from n/a through = 3.1.13...

CVE-2025-24751 WordPress CoBlocks plugin <= 3.1.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in GoDaddy CoBlocks coblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoBlocks: from n/a through = 3.1.13...

CVE-2025-24751 WordPress CoBlocks plugin <= 3.1.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in GoDaddy CoBlocks coblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoBlocks: from n/a through = 3.1.13...

CVE-2025-24751

CVE-2025-24751 concerns the GoDaddy CoBlocks WordPress plugin (versions up to 3.1.13). The incident is a Missing Authorization (Broken Access Control) vulnerability arising from incorrectly configured access control levels, enabling unauthorized actions within CoBlocks. Public sources (Patchstack...

WordPress CoBlocks plugin <= 3.1.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin CoBlocks versions = 3.1.13...

WordPress plugin CoBlocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2025-5561 · Godaddy · Godaddy Coblocks

Name of the Vulnerable Software and Affected Versions: GoDaddy CoBlocks versions through 3.1.13 Description: The issue is related to Missing Authorization in GoDaddy CoBlocks, which enables the exploitation of incorrectly configured access control security levels. Recommendations: For versions...

WordPress CoBlocks plugin < 3.1.13 - Editor+ Stored XSS vulnerability

Editor+ Stored XSS vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin CoBlocks versions 3.1.13...

CVE-2024-7132 CoBlocks < 3.1.13 - Editor+ Stored XSS

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.13 does not escape the content of post embed via one of its block, which could allow users with the capability to publish posts editor and admin by default to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml...

CVE-2024-7132 CoBlocks < 3.1.13 - Editor+ Stored XSS

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.13 does not escape the content of post embed via one of its block, which could allow users with the capability to publish posts editor and admin by default to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml...

CVE-2024-7132

CVE-2024-7132 affects the Page Builder Gutenberg Blocks WordPress plugin prior to version 3.1.13. The issue stems from insufficient escaping of the content of post embeds in one block, enabling stored Cross-Site Scripting by users with publish-post capability (editors/admin by default), even when...

WordPress CoBlocks Plugin < 3.1.13 is vulnerable to Cross Site Scripting (XSS)

Software CoBlocks Type Plugin Vulnerable versions 3.1.13 Fixed in 3.1.13 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-7132 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 2ec557475360 Credits Dmitrii Ignatyev Required...

WordPress CoBlocks plugin < 3.1.12 - Contributor+ SSRF vulnerability

Contributor+ SSRF vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin CoBlocks versions 3.1.12...

CVE-2024-4260 CoBlocks < 3.1.12 - Contributor+ SSRF

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks...

CVE-2024-4260 CoBlocks < 3.1.12 - Contributor+ SSRF

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks...

WordPress CoBlocks Plugin < 3.1.12 is vulnerable to Server Side Request Forgery (SSRF)

Software CoBlocks Type Plugin Vulnerable versions 3.1.12 Fixed in 3.1.12 OWASP Top 10 A1: Injection Classification Server Side Request Forgery SSRF CVE CVE-2024-4260 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID 9551e8b9e50a Credits Dmitrii Ignatyev Required privilege...

WordPress plugin CoBlocks 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress CoBlocks plugin <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Social Profiles vulnerability discovered by wesley wcraft in WordPress Plugin CoBlocks versions = 3.1.9...

WordPress CoBlocks Plugin <= 3.1.9 is vulnerable to Cross Site Scripting (XSS)

Software CoBlocks Type Plugin Vulnerable versions = 3.1.9 Fixed in 3.1.10 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-2933 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 946a48aec387 Credits wesley wcraft Required privile...