Skip to content
Sign in
6.5 Medium

CVE-2025-22644 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Vayu…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeHunk Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce vayu-blocks allows Stored XSS.This issue affects Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce: from n/a through <= 1.4.7.

Affected products and versions

Product Affected versions Fixed in
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce 1.4 earliest → 1.4.7 No fix stated

Other CVEs of Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce

The 4 CVEs of Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce →
CVE-2025-4420 The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site… 6.4 Medium CVE-2025-2568 The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access… 5.3 Medium CVE-2024-10124 The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized… 9.8 Critical
Track this CVE