Lucene search
+L

1362 matches found

Cvelist
Cvelist
•added 2025/10/18 6:42 a.m.•27 views

CVE-2025-11270 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS0.00254EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/18 6:42 a.m.•35 views

CVE-2025-11270

CVE-2025-11270 affects the WordPress plugin “Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns.” It is a stored XSS via the titleTag attribute in all versions up to 5.7.1 due to insufficient input sanitization and output escaping. Exploitation requires authentication at Co...

6.4CVSS4.6AI score0.00254EPSS
SaveExploits0References2
CVE
CVE
•added 2025/10/18 4:25 a.m.•42 views

CVE-2025-11361

CVE-2025-11361 : Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns (WordPress) is vulnerable to Server-Side Request Forgery (SSRF) in all versions up to and including 5.7.1 via eb_save_ai_generated_image. Authenticated attackers with Author+ privileges can issue web reques...

6.4CVSS5.3AI score0.00301EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2025/10/18 4:25 a.m.•8 views

CVE-2025-11361 Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.7.1 via the ebsaveaigeneratedimage function. This makes it possible for authenticated attackers, with Author-leve...

6.4CVSS5.2AI score0.00301EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2025/10/18 4:25 a.m.•34 views

CVE-2025-11361 Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.7.1 via the ebsaveaigeneratedimage function. This makes it possible for authenticated attackers, with Author-leve...

6.4CVSS0.00301EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/10/18 1:20 a.m.•15 views

WordPress Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Rafshanzani Suhada in WordPress Plugin Essential Blocks for Gutenberg versions = 5.7.1...

6.4CVSS5.7AI score0.00254EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2025/10/18 12:55 a.m.•13 views

WordPress Essential Blocks plugin <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery vulnerability

Authenticated Author+ Server-Side Request Forgery vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Essential Blocks for Gutenberg versions = 5.7.1...

6.4CVSS7AI score0.00301EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/18 12:00 a.m.•1 views

CVE-2025-11361: Server-Side Request Forgery (SSRF)

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.7.1 via the ebsaveaigeneratedimage function. This makes it possible for authenticated attackers, with Author-leve...

6.4CVSS5.8AI score0.00301EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/18 12:00 a.m.•1 views

CVE-2025-11270: Improper Neutralization of Input During Web Page Generation

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'titleTag' attribute in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possib...

6.4CVSS6AI score0.00254EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/18 12:00 a.m.•17 views

WordPress plugin Gutenberg Essential Blocks 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A code issue...

6.4CVSS6.9AI score0.00301EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2025/10/18 12:00 a.m.•17 views

WordPress plugin Gutenberg Essential Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

6.4CVSS5.9AI score0.00254EPSS
SaveExploits0References3
Wired Threat Level
Wired Threat Level
•added 2025/10/15 9:30 a.m.•14 views

When Face Recognition Doesn’t Know Your Face Is a Face

An estimated 100 million people live with facial differences. As face recognition tech becomes widespread, some say they’re getting blocked from accessing essential systems and services...

7AI score
SaveExploits0
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2018-6876

Malware in sbrugna...

9.4CVSS7.6AI score0.02016EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•13 views

EUVD-2025-17528

Malicious code in bioql PyPI...

9.8CVSS6.4AI score0.00573EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-52869

Malicious code in bioql PyPI...

9.1CVSS6.6AI score0.00625EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2024-30403

Malicious code in bioql PyPI...

5.3CVSS6.5AI score0.0042EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•17 views

EUVD-2023-51869

Malicious code in bioql PyPI...

8.3CVSS9.1AI score0.00356EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2023-33612

Malicious code in bioql PyPI...

4.3CVSS6.1AI score0.00572EPSS
SaveExploits0References3
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2022-40680

Malicious code in bioql PyPI...

8.8CVSS9.1AI score0.00256EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•11 views

EUVD-2024-32389

Malicious code in bioql PyPI...

5.4CVSS6.5AI score0.0034EPSS
SaveExploits0References2
Rows per page
Query Builder