CVE-2025-2893

creationtimestamp| type| source ---|---|--- 2025-04-29 07:12:10+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13794 2025-04-29 07:51:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnwsbumh432d 2025-04-29 10:58:35+00:00| seen| https://t.me/cvedetector/23983...

CVE-2025-2893

CVE-2025-2893 affects the WordPress plugin Gutenverse – Ultimate Block Addons and Page Builder for Site Editor (versions up to and including 2.2.1). The issue is a Stored Cross‑Site Scripting (XSS) in the countdown Block caused by insufficient input sanitization and output escaping on user-suppli...

WordPress Gutenverse plugin <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via countdown Block vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via countdown Block vulnerability discovered by Webbernaut in WordPress Plugin Gutenverse versions = 2.2.1...