Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: wpzoom Component: Recipe Card Blocks For Gutenberg & Elementor Clear all filters
TI-2024-28945 CVE-2024-43293 · GHSA-mj56-3pg8-97w3

WordPress Recipe Card Blocks for Gutenberg & Elementor plugin <= 3.3.1 - Broken Access Control vulnerability

Priority LOW 38

Missing Authorization vulnerability in WPZOOM Recipe Card Blocks for Gutenberg & Elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Recipe Card Blocks for Gutenberg & Ele…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00399 Published 2024-11-01 No fix listed CWE-862
TI-2021-06917 CVE-2021-24634 · GHSA-2q7f-v24g-xfqg

Recipe Card Blocks < 2.8.3 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.3 does not properly sanitise or escape some of the properties of the Recipe Card Block (such as ingredientsLayout, iconSet, steps, ingredients, recipeTitle, or…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-09-27 Fixed in 2.8.3 CWE-79
TI-2021-06915 CVE-2021-24632 · GHSA-fv2r-phrh-ff5j

Recipe Card Blocks < 2.8.1 - Reflected Cross-Site Scripting

Priority LOW 29

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-09-27 Fixed in 2.8.1 CWE-79