CVE-2025-31817

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPWheels BlockWheels blockwheels allows DOM-Based XSS.This issue affects BlockWheels: from n/a through = 1.0.2...

CVE-2025-31817

creationtimestamp| type| source ---|---|--- 2025-04-01 20:33:42+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10017...

WordPress BlockWheels plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab in WordPress Plugin BlockWheels versions = 1.0.2...

CVE-2025-31817 WordPress BlockWheels plugin <= 1.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPWheels BlockWheels blockwheels allows DOM-Based XSS.This issue affects BlockWheels: from n/a through = 1.0.2...

CVE-2025-31817

CVE-2025-31817 affects BlockWheels (WPWheels) for WordPress. It is a DOM-based XSS caused by improper input neutralization during page generation, impacting BlockWheels versions n/a–1.0.1. Exploitation requires at least LOW privileged user with authentication (Contributor+). A fix exists in Block...