Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
ThemeisleOtter Blocks*

11 matches found

CVE
CVE•added 2023/05/30 8:15 a.m.•79 views

CVE-2023-2288

The Otter WordPress plugin before 2.2.6 does not sanitize some user-controlled file paths before performing file operations on them. This leads to a PHAR deserialization vulnerability on PHP

8.8CVSS8.6AI score0.18423EPSS
CVE
CVE•added 2024/04/18 5:15 a.m.•55 views

CVE-2024-2729

The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before appending it to the final rendered block, allowing contributors to conduct Stored XSS attacks.

6.1CVSS8.8AI score0.00182EPSS
CVE
CVE•added 2024/03/29 5:15 a.m.•51 views

CVE-2024-2841

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 2.6.5 due to insufficient input sanitization and output escaping on user supplied attributes ...

6.4CVSS7.6AI score0.0013EPSS
CVE
CVE•added 2024/05/02 5:15 p.m.•51 views

CVE-2024-3725

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Grid widget in all versions up to, and including, 2.6.9 due to insufficient input sanitization and output escaping on user supplied at...

6.4CVSS5.6AI score0.00144EPSS
CVE
CVE•added 2024/04/09 7:15 p.m.•47 views

CVE-2024-2226

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id parameter in the google-map block in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping. This ma...

6.4CVSS7.6AI score0.00124EPSS
CVE
CVE•added 2024/11/27 6:15 a.m.•43 views

CVE-2024-11219

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 3.0.6 via the get_image function. This makes it possible for unauthenticated attackers to view arbitrary images on the server, whic...

7.5CVSS5.3AI score0.00392EPSS
CVE
CVE•added 2024/04/11 11:15 a.m.•43 views

CVE-2024-3344

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file upload in all versions up to, and including, 2.6.8 due to insufficient input sanitization and output escaping. This makes it possible for authe...

6.4CVSS5.8AI score0.00092EPSS
CVE
CVE•added 2024/04/11 11:15 a.m.•40 views

CVE-2024-3343

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block attributes in all versions up to, and including, 2.6.8 due to insufficient input sanitization and output escaping on user supplied at...

6.4CVSS5.7AI score0.00124EPSS
CVE
CVE•added 2024/06/08 3:15 p.m.•38 views

CVE-2024-35682

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Themeisle Otter Blocks PRO.This issue affects Otter Blocks PRO: from n/a through 2.6.11.

5.3CVSS5.1AI score0.00198EPSS
CVE
CVE•added 2024/03/13 4:15 p.m.•37 views

CVE-2024-1691

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file upload form, which allows SVG uploads, in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. ...

6.1CVSS6.2AI score0.00664EPSS
CVE
CVE•added 2024/03/13 4:15 p.m.•21 views

CVE-2024-1684

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contact form file field CSS metabox in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This mak...

6.4CVSS6.1AI score0.00144EPSS