Lucene search
+L

183 matches found

RedhatCVE
RedhatCVE
added 2025/05/22 7:22 p.m.8 views

CVE-2021-24634

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block such as ingredientsLayout, iconSet, steps, ingredients, recipeTitle, or settings, which could allow users with a role as low as contributor to perfor...

5.4CVSS6AI score0.00604EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/02/27 2:35 p.m.12 views

CVE-2025-26983

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.3...

4.3CVSS7.2AI score0.0031EPSS
Exploits0References1
NVD
NVD
added 2025/02/25 3:15 p.m.9 views

CVE-2025-26983

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor recipe-card-blocks-by-wpzoom allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through = 3.4.3...

4.3CVSS0.0031EPSS
Exploits0References1
CVE
CVE
added 2025/02/25 2:17 p.m.55 views

CVE-2025-26983

CVE-2025-26983 concerns WPZOOM’s Recipe Card Blocks for Gutenberg & Elementor (plugin: Recipe Card Blocks for Gutenberg & Elementor) version

4.3CVSS7.2AI score0.0031EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/02/25 12:0 a.m.3 views

PT-2025-7879 · Wpzoom · Wpzoom Recipe Card Blocks

Name of the Vulnerable Software and Affected Versions: WPZOOM Recipe Card Blocks for Gutenberg & Elementor versions through 3.4.3 Description: The issue is related to a Missing Authorization vulnerability, which allows exploitation due to incorrectly configured access control security levels...

4.3CVSS9.5AI score0.0031EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/02/05 6:28 a.m.11 views

CVE-2024-5147

The WPZOOM Addons for Elementor Templates, Widgets plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.1.37 via the 'gridstyle' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server,...

9.8CVSS8AI score0.01005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/02/04 11:47 p.m.15 views

CVE-2024-22162

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPZOOM WPZOOM Shortcodes allows Reflected XSS.This issue affects WPZOOM Shortcodes: from n/a through 1.0.3...

7.1CVSS7AI score0.00331EPSS
Exploits0References1
NVD
NVD
added 2024/11/19 10:15 p.m.27 views

CVE-2024-30424

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPZOOM Beaver Builder Addons by WPZOOM wpzoom-addons-for-beaver-builder allows Stored XSS.This issue affects Beaver Builder Addons by WPZOOM: from n/a through = 1.3.4...

6.5CVSS0.00218EPSS
Exploits0References1
CVE
CVE
added 2024/11/19 10:0 p.m.63 views

CVE-2024-30424

CVE-2024-30424 corresponds to a Stored XSS in the WPZOOM Beaver Builder Addons for WordPress, affecting versions up to 1.3.4. The Red Hat/NVD entries and multiple sources consistently identify the root cause as insufficient input sanitization and output escaping in the Heading widget, enabling au...

6.5CVSS5.9AI score0.00218EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2024/11/19 10:0 p.m.41 views

CVE-2024-30424 WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPZOOM Beaver Builder Addons by WPZOOM wpzoom-addons-for-beaver-builder allows Stored XSS.This issue affects Beaver Builder Addons by WPZOOM: from n/a through = 1.3.4...

6.5CVSS0.00218EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/19 10:0 p.m.21 views

CVE-2024-30424 WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in WPZOOM Beaver Builder Addons by WPZOOM allows Stored XSS.This issue affects Beaver Builder Addons by WPZOOM: from n/a through 1.3.4...

6.5CVSS6.7AI score0.00218EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/19 12:0 a.m.8 views

WordPress plugin Beaver Builder Addons by WPZOOM 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

6.5CVSS5.9AI score0.00218EPSS
Exploits0References1
NVD
NVD
added 2024/11/01 3:15 p.m.16 views

CVE-2024-43293

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through 3.3.1...

8.8CVSS0.00393EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/11/01 3:15 p.m.4 views

CVE-2024-43293

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Elementor: from n/a through 3.3.1...

8.8CVSS5.1AI score0.00393EPSS
Exploits0References2
CVE
CVE
added 2024/11/01 2:17 p.m.46 views

CVE-2024-43293

CVE-2024-43293 is a Missing Authorization vulnerability in the WPZOOM Recipe Card Blocks for Gutenberg & Elementor plugin (affected:

8.8CVSS5.7AI score0.00393EPSS
Exploits0References1Affected Software1
OSV
OSV
added 2024/09/25 3:15 a.m.5 views

CVE-2024-9027

The WPZOOM Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

5.4CVSS6AI score0.00342EPSS
Exploits0References3
NVD
NVD
added 2024/09/25 3:15 a.m.38 views

CVE-2024-9027

The WPZOOM Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00342EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/09/25 2:5 a.m.33 views

CVE-2024-9027 WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode

The WPZOOM Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS0.00342EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2024/09/25 2:5 a.m.9 views

CVE-2024-9027 WPZOOM Shortcodes <= 1.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode

The WPZOOM Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'box' shortcode in all versions up to, and including, 1.0.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

6.4CVSS5.8AI score0.00342EPSS
Exploits0References3
CVE
CVE
added 2024/09/25 2:5 a.m.56 views

CVE-2024-9027

CVE-2024-9027 affects the WPZOOM Shortcodes WordPress plugin (versions up to and including 1.0.5). Root cause: insufficient input sanitization and output escaping on the box shortcode attributes, enabling stored XSS. Exploitation requires authentication at contributor level or higher, with the at...

6.4CVSS5.5AI score0.00342EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder