Lucene search
+L

1457 matches found

NVD
NVD
added 2024/12/12 4:15 a.m.12 views

CVE-2024-11914

The Gutenberg Blocks and Page Layouts – Attire Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'attire-blocks/post-carousel' block in all versions up to, and including, 1.9.5 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00447EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/12/12 3:23 a.m.13 views

CVE-2024-11914 Gutenberg Blocks and Page Layouts – Attire Blocks <= 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Gutenberg Blocks and Page Layouts – Attire Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'attire-blocks/post-carousel' block in all versions up to, and including, 1.9.5 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS5.8AI score0.00447EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2024/12/12 3:23 a.m.20 views

CVE-2024-11914 Gutenberg Blocks and Page Layouts – Attire Blocks <= 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Gutenberg Blocks and Page Layouts – Attire Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'attire-blocks/post-carousel' block in all versions up to, and including, 1.9.5 due to insufficient input sanitization and output escaping. This makes it possible for...

6.4CVSS0.00447EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.8 views

WordPress plugin Gutenberg Blocks and Page Layouts – Attire Blocks 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... A cross-site scripting vulnerabilit...

6.4CVSS7.8AI score0.00447EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/12/12 12:0 a.m.11 views

WordPress plugin Gutenberg Blocks with AI by Kadence WP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

5.4CVSS8.2AI score0.00329EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/12/12 12:0 a.m.20 views

PT-2024-16424 · Kadence Wp · Gutenberg Blocks With Ai

Name of the Vulnerable Software and Affected Versions: Gutenberg Blocks with AI by Kadence WP versions prior to 3.2.54 Description: The issue concerns insufficient validation and escaping of block options, which could allow users with the contributor role and above to perform Stored Cross-Site...

5.4CVSS8.1AI score0.00329EPSS
SaveExploits1References8
NVD
NVD
added 2024/12/09 1:15 p.m.18 views

CVE-2023-51360

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 4.2.0...

8.8CVSS0.00573EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/09 1:15 p.m.8 views

CVE-2023-51360

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0...

8.8CVSS5.8AI score0.00573EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/09 1:15 p.m.20 views

CVE-2023-51359

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 4.2.0...

8.8CVSS0.00575EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/09 1:15 p.m.10 views

CVE-2023-51359

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0...

8.8CVSS5.8AI score0.00575EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/09 1:15 p.m.7 views

CVE-2023-47760

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 4.2.0...

8.8CVSS5.8AI score0.00393EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/09 12:0 a.m.8 views

PT-2024-14088 · Wpdeveloper · Wpdeveloper Essential Blocks For Gutenberg

Name of the Vulnerable Software and Affected Versions: WPDeveloper Essential Blocks for Gutenberg versions n/a through 4.2.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. This vulnerabilit...

8.8CVSS9.3AI score0.00575EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.9 views

WordPress plugin Essential Blocks for Gutenberg 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.8CVSS6.6AI score0.00573EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.9 views

WordPress plugin Essential Blocks for Gutenberg 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.8CVSS8.7AI score0.00393EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/09 12:0 a.m.9 views

WordPress plugin Essential Blocks for Gutenberg 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

8.8CVSS8.7AI score0.00575EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/05 5:15 a.m.6 views

CVE-2024-10178

The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping on user supplied attribute...

5.4CVSS5.9AI score0.00324EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/05 4:23 a.m.10 views

CVE-2024-10178 Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor <= 3.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget

The Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping on user supplied attribute...

6.4CVSS5.9AI score0.00324EPSS
SaveExploits0References3
OSV
OSV
added 2024/12/03 6:15 a.m.7 views

CVE-2024-10484

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Team' widget in all versions up to, and including, 2.16.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

5.4CVSS5.9AI score0.00288EPSS
SaveExploits0References3
NVD
NVD
added 2024/12/03 6:15 a.m.41 views

CVE-2024-10484

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Team' widget in all versions up to, and including, 2.16.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS0.00288EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/12/03 5:33 a.m.16 views

CVE-2024-10484 Spectra – WordPress Gutenberg Blocks <= 2.16.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Team Widget

The Spectra – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'Team' widget in all versions up to, and including, 2.16.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...

6.4CVSS5.9AI score0.00288EPSS
SaveExploits0References3
Rows per page
Query Builder