- Description
- The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
- Source
- contact@wpscan.com
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 5.4
- Impact score
- 2.7
- Exploitability score
- 2.3
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
- Hype score
- Not currently trending
🚨 CVE-2024-10678 (Published: 2024-12-13) - A medium severity vulnerability in Ultimate Blocks. Affects multiple versions. 🛠️ Remediation: Update to the latest version to mitigate risks. For more details, visit: https://t.co/LnpvgOaIrP #CyberSecurity #VulnerabilityAlert
@transilienceai
17 Dec 2024
11 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2024-10678 (Published: 2024-12-13) - A medium severity vulnerability affects Ultimate Blocks. Ensure you're using the latest version to mitigate risks. For detailed remediation steps, check out the full report: https://t.co/LnpvgOaIrP #CyberSecurity #VulnerabilityAlert
@transilienceai
17 Dec 2024
10 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🔒 CVE-2024-10678 (Published: 2024-12-13) affects Ultimate Blocks. This medium-severity vulnerability impacts specific versions. To safeguard your site, ensure you update to the latest version immediately. Stay secure! More info: https://t.co/LnpvgOaIrP #CyberSecurity #WordPress
@transilienceai
17 Dec 2024
14 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2024-10678 (Published: 2024-12-13) - A medium severity vulnerability in Ultimate Blocks. Affects multiple versions. Remediation: Update to the latest version to mitigate risks. Stay secure! 🔒 More info: https://t.co/LnpvgOaIrP #CyberSecurity #VulnerabilityAlert
@transilienceai
17 Dec 2024
10 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
🚨 CVE-2024-10678 (Published: 2024-12-13) - Medium severity vulnerability in Ultimate Blocks. Affects specific versions. 🛡️ Remediation is crucial! Check out the details and ensure your site is secure: https://t.co/LnpvgOaIrP #CyberSecurity #VulnerabilityAlert
@transilienceai
17 Dec 2024
2 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-10678 The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block i… https://t.co/r7tNDL5Rd3
@CVEnew
13 Dec 2024
131 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2024-10678 Stored XSS Vulnerability in Ultimate Blocks WordPress Plugin Pre-3.2.4 The Ultimate Blocks WordPress plugin, in versions before 3.2.4, doesn't properly check and secure certain block options. These... https://t.co/sYX2oaCnzX
@VulmonFeeds
13 Dec 2024
57 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes