Vulnerabilities

TI-2025-00420 CVE-2025-0506 · GHSA-qr8x-m34w-97pj

Cross-site scripting in Eagle-Themes Rise Blocks – A Complete Gutenberg Page Builder

LOW 28

The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the titleTag parameter in all versions up to, and including, 3.6 due to insufficient input sanitiz…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0034 Published 2025-02-12 No fix listed CWE-79

TI-2023-28036 CVE-2023-51378 · GHSA-25jp-v3h8-rhhg

WordPress Rise Blocks Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Rise Themes Rise Blocks – A Complete Gutenberg Page Builder.This issue affects Rise Blocks – A Complete Gutenberg Page Builder: from n/a through 3.1.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00216 Published 2023-12-29 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting in Eagle-Themes Rise Blocks – A Complete Gutenberg Page Builder

WordPress Rise Blocks Plugin <= 3.1 is vulnerable to Cross Site Request Forgery (CSRF)