CVE-2025-26983 WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.3...

CVE-2025-26945 WordPress Info Cards plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Info Cards info-cards allows Stored XSS.This issue affects Info Cards: from n/a through = 1.0.5...

CVE-2025-26871

CVE-2025-26871 refers to a Missing Authorization vulnerability in Essential Blocks for Gutenberg (WP developers’ Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates). Affected versions are listed as from n/a through 4.8.3. The root cause is incorrectly configured access control...

CVE-2025-26983: Missing Authorization

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.3...

PT-2025-7830 · Unknown · Essential Blocks For Gutenberg

Name of the Vulnerable Software and Affected Versions: Essential Blocks for Gutenberg versions through 4.8.3 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For Essential...

PT-2025-7879 · Wpzoom · Wpzoom Recipe Card Blocks

Name of the Vulnerable Software and Affected Versions: WPZOOM Recipe Card Blocks for Gutenberg & Elementor versions through 3.4.3 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control security levels...

CVE-2025-26871: Missing Authorization

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through = 4.8.3...

WordPress plugin Recipe Card Blocks for Gutenberg & Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

WordPress plugin Essential Blocks for Gutenberg 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...

PT-2025-7859

Name of the Vulnerable Software and Affected Versions Info Cards – Gutenberg block for creating Beautiful Cards versions 1.0.0 through 1.0.5 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allows for Stored...

WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.4.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Prissy in WordPress Plugin Recipe Card Blocks for Gutenberg & Elementor versions = 3.4.3...

WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Essential Blocks for Gutenberg versions = 4.8.3...

WordPress Post Grid and Gutenberg Blocks plugin <= 2.2.92 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Post Grid and Gutenberg Blocks versions = 2.2.92...

WordPress Post Grid and Gutenberg Blocks – ComboBlocks plugin <= 2.3.5 - Unauthenticated Paid Order Creation vulnerability

Unauthenticated Paid Order Creation vulnerability discovered by wesley wcraft in WordPress Plugin Post Grid and Gutenberg Blocks versions = 2.3.5...

CVE-2025-26771

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through = 1.7...

Malicious code in gutenberg-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f8fb42c4eff5d51a88f1a658c1f8fa57f9f43e22f1d6220b0de54ab39b1df962 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-11335: Improper Neutralization of Input During Web Page Generation

The UltraEmbed – Advanced Iframe Plugin For WordPress with Gutenberg Block Included plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframe' shortcode in all versions up to, and including, 1.0.3 due to insufficient input sanitization and output escaping on user...

CVE-2024-13465

The aBlocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Table Of Content" Block, specifically in the "markerView" attribute, in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This mak...

PT-2025-6549 · WordPress · Ablocks

Name of the Vulnerable Software and Affected Versions: aBlocks - WordPress Gutenberg Blocks plugin versions up to and including 1.6.1 Description: The issue is related to Stored Cross-Site Scripting via the "Table Of Content" Block, specifically in the markerView attribute, due to insufficient...

CVE-2024-13465: Improper Neutralization of Input During Web Page Generation

The aBlocks – WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Table Of Content" Block, specifically in the "markerView" attribute, in all versions up to, and including, 1.6.1 due to insufficient input sanitization and output escaping. This mak...