VYPR

Stackable – Page Builder Gutenberg Blocks

by WordPress

CVEs (3)

  • CVE-2024-6296MedJun 28, 2024
    risk 0.35cvss 6.4epss 0.01

    The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-caption’ parameter in all versions up to, and including, 3.13.1 due to insufficient input sanitization and output escaping. This makes it possible…

  • CVE-2024-2039MedApr 9, 2024
    risk 0.35cvss 6.4epss 0.00

    The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post(v2) block title tag in all versions up to, and including, 3.12.11 due to insufficient input sanitization and output escaping on user supplied…

  • CVE-2024-8760MedOct 12, 2024
    risk 0.34cvss 5.3epss 0.00

    The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to CSS Injection in all versions up to, and including, 3.13.6. This makes it possible for unauthenticated attackers to embed untrusted style information into comments resulting in a possibility of…