VYPR

Blockons

by WordPress

CVEs (2)

  • CVE-2025-14360HigJan 8, 2026
    risk 0.49cvss 7.5epss 0.00

    Missing Authorization vulnerability in Kaira Blockons blockons allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blockons: from n/a through <= 1.2.19.

  • CVE-2026-24550MedJan 23, 2026
    risk 0.42cvss 6.5epss 0.00

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Kaira Blockons blockons allows Stored XSS.This issue affects Blockons: from n/a through <= 1.2.19.