Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Qi Blocks 1.4 Clear all filters
TI-2025-01400 CVE-2025-1627 · GHSA-mgxw-4c3p-hwg4

Qi Blocks < 1.4 - Contributor+ Stored XSS via ToC Block

Priority MEDIUM 58

The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00254 Published 2025-05-19 Fixed in 1.4 CWE-79
TI-2025-01399 CVE-2025-1626 · GHSA-rfrq-gwcc-2wcq

Qi Blocks < 1.4 - Contributor+ Stored XSS vi Countdown Block

Priority MEDIUM 58

The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Countdown block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00254 Published 2025-05-19 Fixed in 1.4 CWE-79
TI-2025-01398 CVE-2025-1625 · GHSA-mhq7-845r-m6gh

Qi Blocks < 1.4 - Contributor+ Stored XSS via Counter Block

Priority MEDIUM 58

The Qi Blocks WordPress plugin before 1.4 does not validate and escape some of its Counter block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor r…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00294 Published 2025-05-19 Fixed in 1.4 CWE-79