6.1
Moyenne
CVE-2024-2729 The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before…
Description
The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before appending it to the final rendered block, allowing contributors to conduct Stored XSS attacks.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Otter Blocks 2.6 | premières → < 2.6.6 | 2.6.6 |
| otter_blocks | Versions non publiées |
Autres CVE de Otter Blocks
Les 6 CVE de Otter Blocks →
CVE-2026-109936
The Otter Blocks WordPress plugin before 3.2.8 does not correctly bound a pattern it uses to rewrite its…
7.5
Élevée
CVE-2026-109935
The Otter Blocks WordPress plugin before 3.2.8 does not enforce its block visibility conditions when a published post…
5.3
Moyenne
CVE-2026-109934
The Otter Blocks WordPress plugin before 3.2.8 does not correctly determine whether a post is publicly readable…
5.3
Moyenne
CVE-2026-109933
The Otter Blocks WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styling values…
6.8
Moyenne