Jan Boddez

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Jan Boddez records in CISA KEV

No Jan Boddez vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Indieblocks 1 record LOW

Records

2 records

TI-2025-05375 CVE-2025-5950 · GHSA-f7p8-ffq5-398r

IndieBlocks <= 0.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via kind Parameter

LOW 28

The IndieBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘kind’ parameter in all versions up to, and including, 0.13.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00254 Published 2025-06-13 No fix listed CWE-79

TI-2025-22279 CVE-2025-31009 · GHSA-qcjq-v94f-pfgp

WordPress IndieBlocks plugin <= 0.13.1 - Server Side Request Forgery (SSRF) Vulnerability

LOW 25

Server-Side Request Forgery (SSRF) vulnerability in Jan Boddez IndieBlocks indieblocks allows Server Side Request Forgery.This issue affects IndieBlocks: from n/a through <= 0.13.1.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00366 Published 2025-04-09 No fix listed CWE-918

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0