plugin

Vk Blocks Pro Vulnerabilities

4 known security issues reported for the Vk Blocks Pro WordPress plugin. Most recent disclosed May 23, 2023.

2 medium

Running Vk Blocks Pro on your site? Check whether your installed version is affected.

Scan your site free

VK Blocks Pro [vk-blocks-pro] < 1.54.0.0

unknown

[en] Cross-site scripting vulnerability in Tag edit function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

Affected:
up to 1.54.0.0
Fixed in:
1.54.0.0
Disclosed:
May 23, 2023

CVE-2023-27923 on NVD →

VK Blocks Pro [vk-blocks-pro] < 1.54.0.0

unknown

[en] Cross-site scripting vulnerability in Post function of VK Blocks 1.53.0.1 and earlier and VK Blocks Pro 1.53.0.1 and earlier allows a remote authenticated attacker to inject an arbitrary script.

Affected:
up to 1.54.0.0
Fixed in:
1.54.0.0
Disclosed:
May 23, 2023

CVE-2023-27925 on NVD →

VK Blocks <= 1.53.0.1 - Stored (Contributor+) Cross-Site Scripting in Post

medium

The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post functionality in versions up to, and including, 1.53.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject ar...

CVSS:
6.4
Affected:
up to 1.53.0.1
Fixed in:
1.54.0
Disclosed:
May 9, 2023

CVE-2023-27925 on NVD →

VK Blocks <= 1.53.0.1 - Stored (Contributor+) Cross-Site Scripting in Tag Edit

medium

The VK Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Tag Edit functionality in versions up to, and including, 1.53.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to injec...

CVSS:
6.4
Affected:
up to 1.53.0.1
Fixed in:
1.54.0
Disclosed:
May 9, 2023

CVE-2023-27923 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database