Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: sonalsinha21 Component: Skt Blocks Clear all filters
TI-2025-30596 CVE-2025-48270 · GHSA-vcqf-8qmf-qc2r

WordPress SKT Blocks plugin <= 2.2 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows DOM-Based XSS.This issue affects SKT Blocks: from n/a through <= 2.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00223 Published 2025-05-19 No fix listed CWE-79
TI-2025-28987 CVE-2025-46235 · GHSA-3hgc-5x5v-4fp3

WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 2.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00227 Published 2025-04-22 No fix listed CWE-79
TI-2025-19869 CVE-2025-26998 · GHSA-qg6g-c2hr-fv6w

WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 1.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 1.8.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00281 Published 2025-04-15 No fix listed CWE-79
TI-2025-02868 CVE-2025-3276 · GHSA-8388-vmf2-8gm7

SKT Blocks – Gutenberg based Page Builder <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00233 Published 2025-04-12 No fix listed CWE-79
TI-2025-19687 CVE-2025-26771 · GHSA-c73j-8h5p-xxxr

WordPress SKT Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 1.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00218 Published 2025-02-17 No fix listed CWE-79
TI-2024-12772 CVE-2024-13733 · GHSA-cwqv-628v-v6fj

SKT Blocks – Gutenberg based Page Builder <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's skt-blocks/post-carousel block in all versions up to, and including, 1.7 due to insufficien…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00306 Published 2025-02-04 No fix listed CWE-79
TI-2024-32238 CVE-2024-48036 · GHSA-w9wx-g7f2-2m32

WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks.This issue affects SKT Blocks: from n/a through <= 1.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00237 Published 2024-10-17 No fix listed CWE-79
TI-2024-29535 CVE-2024-43946 · GHSA-7f5w-jgw7-q73x

WordPress SKT Blocks plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in SKT Themes SKT Blocks – Gutenberg based Page Builder allows Stored XSS.This issue affects SKT Blocks – Gutenber…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0026 Published 2024-08-29 No fix listed CWE-79