Global Content Blocks Vulnerabilities

[en] A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely.

Affected:

up to 2.1.5

Fix:

No patched version reported

Disclosed:

Jun 23, 2022

CVE-2017-20090 on NVD →

A vulnerability was found in Global Content Blocks Plugin 2.1.5. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely.

CVSS:

8.8

Affected:

up to 2.1.5

Fix:

No patched version reported

Disclosed:

Mar 1, 2017

CVE-2017-20090 on NVD →

This WordPress Global Content Blocks plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Upgrade the plugin.

Affected:

up to 1.3

Fixed in:

1.3

Disclosed:

Aug 18, 2011

The global-content-blocks WordPress plugin was affected by a Cross-Site Request Forgery (CSRF) security vulnerability.

Affected:

up to 2.1.5

Fix:

No patched version reported

The global-content-blocks WordPress plugin was affected by a SQL Injection security vulnerability.

Affected:

up to 1.2

Fix:

No patched version reported