Skt Blocks Vulnerabilities

The SKT Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that wi...

CVSS:

6.4

Affected:

up to 2.5

Fix:

No patched version reported

Disclosed:

Sep 26, 2025

CVE-2025-60138 on NVD →

The SKT Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that wi...

CVSS:

6.4

Affected:

up to 2.2

Fixed in:

2.3

Disclosed:

May 19, 2025

CVE-2025-48270 on NVD →

The SKT Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that wi...

CVSS:

6.4

Affected:

up to 2.0

Fixed in:

2.1

Disclosed:

Apr 22, 2025

CVE-2025-46235 on NVD →

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitra...

CVSS:

6.4

Affected:

up to 1.8

Fixed in:

1.9

Disclosed:

Apr 11, 2025

CVE-2025-26998 on NVD →

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post Carousel block in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level acc...

CVSS:

6.4

Affected:

up to 1.9

Fixed in:

2.0

Disclosed:

Apr 11, 2025

CVE-2025-3276 on NVD →

The SKT Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that wi...

CVSS:

6.4

Affected:

up to 1.7

Fixed in:

1.8

Disclosed:

Feb 14, 2025

CVE-2025-26771 on NVD →

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's skt-blocks/post-carousel block in all versions up to, and including, 1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for aut...

CVSS:

6.4

Affected:

up to 1.7

Fixed in:

1.8

Disclosed:

Feb 3, 2025

CVE-2024-13733 on NVD →

The SKT Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that wi...

CVSS:

6.4

Affected:

up to 1.6

Fixed in:

1.7

Disclosed:

Oct 9, 2024

CVE-2024-48036 on NVD →

The SKT Blocks – Gutenberg based Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitra...

CVSS:

6.4

Affected:

up to 1.6

Fixed in:

1.7

Disclosed:

Aug 26, 2024

CVE-2024-43946 on NVD →