Lucene search
K

56 matches found

RedhatCVE
RedhatCVE
added 2 days ago5 views

CVE-2026-1395

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's blockid attribute in all versions up to, and including, 1.1.3. This is due to insufficient input sanitization and output escaping combined with a custom unescaping routine that reintroduce...

6.4CVSS5.7AI score0.00014EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/22 12:30 p.m.1 views

EUVD-2026-24716

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's blockid attribute in all versions up to, and including, 1.1.3. This is due to insufficient input sanitization and output escaping combined with a custom unescaping routine that reintroduce...

6.4CVSS5.9AI score0.00014EPSS
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2026/04/22 9:27 a.m.0 views

CVE-2026-1395

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's blockid attribute in all versions up to, and including, 1.1.3. This is due to insufficient input sanitization and output escaping combined with a custom unescaping routine that reintroduce...

6.4CVSS5.9AI score0.00014EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.5 views

WordPress plugin Gutentools 跨站脚本漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. WordPres...

6.4CVSS5.8AI score0.00014EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.2 views

PT-2026-34315

The Gutentools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Slider block's block id attribute in all versions up to, and including, 1.1.3. This is due to insufficient input sanitization and output escaping combined with a custom unescaping routine that reintroduc...

6.4CVSS5.9AI score0.00014EPSS
Exploits0References6
EUVD
EUVD
added 2026/04/09 12:31 a.m.0 views

EUVD-2026-20783

The Post Blocks & Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliderStyle' block attribute in the Posts Slider block in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS6.1AI score0.00042EPSS
Exploits0References6
NVD
NVD
added 2026/04/08 10:16 p.m.0 views

CVE-2026-5711

The Post Blocks & Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliderStyle' block attribute in the Posts Slider block in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS0.00042EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/04/08 9:25 p.m.17 views

CVE-2026-5711 Post Blocks & Tools <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'sliderStyle' Block Attribute

The Post Blocks & Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliderStyle' block attribute in the Posts Slider block in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS0.00042EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/08 9:25 p.m.0 views

CVE-2026-5711 Post Blocks & Tools <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'sliderStyle' Block Attribute

The Post Blocks & Tools plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sliderStyle' block attribute in the Posts Slider block in all versions up to, and including, 1.3.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes ...

6.4CVSS6.1AI score0.00042EPSS
Exploits0References5
Patchstack
Patchstack
added 2025/12/31 12:0 a.m.4 views

WordPress Gosign - Posts Slider Block plugin <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

WordPress Gosign - Posts Slider Block plugin = 1.1.0 - Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Nishiv - Developer in WordPress Plugin Gosign – Posts Slider Block versions = 1.1.0...

6.4CVSS5.4AI score0.001EPSS
Exploits0References1Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-33234

Malicious code in bioql PyPI...

4.3CVSS8.6AI score0.00323EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-53189

Malicious code in bioql PyPI...

5.9CVSS6.6AI score0.00118EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-24961

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.00056EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-24224

Malicious code in bioql PyPI...

8.8CVSS6.4AI score0.00606EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-9160

Malicious code in bioql PyPI...

6.5CVSS7.3AI score0.00204EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-51645

Malicious code in bioql PyPI...

4.3CVSS9.1AI score0.00087EPSS
Exploits0References2
NVD
NVD
added 2025/08/15 3:15 a.m.2 views

CVE-2025-8676

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in versions less than, or equal to, 2.0.0 via the getactiveplugins function. This makes it possible for authenticated attackers, with subscriber-level access and above to extract...

4.3CVSS0.00067EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/08/15 2:24 a.m.6 views

CVE-2025-8676 B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in versions less than, or equal to, 2.0.0 via the getactiveplugins function. This makes it possible for authenticated attackers, with subscriber-level access and above to extract...

4.3CVSS0.00067EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/08/15 2:24 a.m.2 views

CVE-2025-8676 B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Sensitive Information Exposure

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Sensitive Information Exposure in versions less than, or equal to, 2.0.0 via the getactiveplugins function. This makes it possible for authenticated attackers, with subscriber-level access and above to extract...

4.3CVSS6.7AI score0.00067EPSS
Exploits0References3
CVE
CVE
added 2025/08/15 2:24 a.m.18 views

CVE-2025-8676

CVE-2025-8676 concerns the WordPress plugin B Slider – Gutenberg Slider Block for WP (vulnerable:

4.3CVSS6.7AI score0.00067EPSS
Exploits0References3
Rows per page
Query Builder