Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

11 records

Vendor: edge22 Clear all filters
TI-2026-11388 CVE-2026-13458 · GHSA-vxv6-p94x-jpx2

Cross-site scripting in edge22 GenerateBlocks

Priority LOW 29

The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes in all versions up to, and including, 2.3.0 due to insufficient input sanitization and out…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00419 Published 2026-08-01 No fix listed CWE-79
TI-2026-08552 CVE-2026-9756 · GHSA-735g-4w2p-c7c6

Cross-site scripting in edge22 GenerateBlocks

Priority LOW 28

The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Headline Block 'linkMetaFieldType' Dynamic Link Attribute in all versions up to, and including, 2.2.1 due to insufficient input san…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00357 Published 2026-07-03 No fix listed CWE-79
TI-2026-02975 CVE-2026-3454 · GHSA-6288-wf2g-3fwm

Authorization bypass in edge22 GenerateBlocks

Priority LOW 30

The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00539 Published 2026-05-05 No fix listed CWE-639
TI-2025-10890 CVE-2025-11879 · GHSA-xgcr-j3c3-gc3w

GenerateBlocks <= 2.1.1 - Improper Authorization to Authenticated (Contributor+) Arbitrary Options Disclosure

Priority LOW 29

The GenerateBlocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_option_rest' function in all versions up to, and including, 2.1.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00295 Published 2025-10-25 No fix listed CWE-285
TI-2024-03234 CVE-2024-3469 · GHSA-6crp-pv4g-xcj8

GP Premium <= 2.4.0 - Reflected Cross-Site Scripting

Priority LOW 28

The GP Premium plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00637 Published 2024-06-05 No fix listed CWE-79
TI-2023-06152 CVE-2023-6731 · GHSA-vgr9-g4rq-xm99

WP Show Posts <= 1.1.5 - Improper Authorization to Information Exposure

Priority LOW 20

The WP Show Posts plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on multiple AJAX functions in all versions up to, and including, 1.1.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00375 Published 2024-05-02 No fix listed CWE-285
TI-2024-01381 CVE-2024-1479 · GHSA-8pvm-h2g9-jmjq

WP Show Posts <= 1.1.4 - Information Exposure

Priority LOW 31

The WP Show Posts plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.1.4 via the wpsp_display function.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00653 Published 2024-03-13 No fix listed CWE-863
TI-2024-01356 CVE-2024-1452 · GHSA-w47g-mprg-82v2

GenerateBlocks <= 1.8.2 - Sensitive Information Exposure

Priority LOW 21

The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.2 via Query Loop.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00575 Published 2024-03-13 No fix listed CWE-863
TI-2023-06219 CVE-2023-6807 · GHSA-xp6q-36fr-27p3

GeneratePress Premium <= 2.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom Meta

Priority LOW 29

The GeneratePress Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom meta output in all versions up to, and including, 2.3.2 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00451 Published 2024-02-05 No fix listed CWE-79