Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:34 p.m.•20 views

CVE-2021-24546

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code...

8.8CVSS7AI score0.01811EPSS
SaveExploits2References1
OSV
OSV
•added 2021/10/11 11:15 a.m.•17 views

CVE-2021-24546

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code...

8.8CVSS5.9AI score0.01811EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2021/10/11 11:15 a.m.•14 views

CVE-2021-24546

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code...

8.8CVSS7.4AI score0.01811EPSS
SaveExploits2References2
Prion
Prion
•added 2021/10/11 11:15 a.m.•31 views

Code injection

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code...

6.5CVSS8.8AI score0.01811EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2021/10/11 10:45 a.m.•45 views

CVE-2021-24546 EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code...

9.1AI score0.01811EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/11 12:00 a.m.•3 views

CVE-2021-24546: Improper Control of Generation of Code

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code...

8.8CVSS6.1AI score0.01811EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2021/10/11 12:00 a.m.•2 views

PT-2021-16066

Name of the Vulnerable Software and Affected Versions EditorsKit WordPress plugin versions prior to 1.31.6 Description The issue allows users with a role as low as contributor to execute arbitrary PHP code due to the lack of sanitization and validation of the Conditional Logic of the Custom...

8.8CVSS0.01811EPSS
SaveExploits2References4
Rows per page
Query Builder