CVE-2024-2369

The Page Builder Gutenberg Blocks (also known as CoBlocks ) WordPress plugin is vulnerable to Stored Cross-Site Scripting (XSS) in versions prior to 3.1.7 . The root cause is the failure to validate and escape certain block options before they are rendered in a page or post where the block is emb...

CVE-2024-1049

CVE-2024-1049 affects the WordPress plugin Page Builder Gutenberg Blocks – CoBlocks . It is vulnerable to Stored Cross-Site Scripting via the plugin’s Icon Widget, in all versions up to 3.1.6, due to insufficient input sanitization and output escaping on the link value. The vulnerability requires...

CVE-2024-4260

The Page Builder Gutenberg Blocks (also known as CoBlocks ) WordPress plugin, in versions prior to 3.1.12 , is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is the plugin's failure to prevent users from pinging arbitrary hosts via specific shortcodes . This flaw allows high-...

CVE-2024-7132

CVE-2024-7132 affects the Page Builder Gutenberg Blocks WordPress plugin prior to version 3.1.13. The issue stems from insufficient escaping of the content of post embeds in one block, enabling stored Cross-Site Scripting by users with publish-post capability (editors/admin by default), even when...