Indieblocks

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-5950 Jun 13, 03:15 MEDIUM This Month

Stored Cross-Site Scripting (XSS) in IndieBlocks WordPress plugin up to version 0.13.2 allows authenticated attackers with Contributor-level access or higher to inject arbitrary web scripts via the 'kind' parameter. These scripts execute when any user visits an affected page. No public exploit or active exploitation has been identified, and EPSS score is low (0.04%).

WordPress XSS Indieblocks Wordpress Plugin

NVD

CVSS 3.1

6.4

EPSS

0.0%

CVE-2025-5950

EPSS 0% CVSS 6.4

MEDIUM This Month

Stored Cross-Site Scripting (XSS) in IndieBlocks WordPress plugin up to version 0.13.2 allows authenticated attackers with Contributor-level access or higher to inject arbitrary web scripts via the 'kind' parameter. These scripts execute when any user visits an affected page. No public exploit or active exploitation has been identified, and EPSS score is low (0.04%).

WordPress XSS Indieblocks +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy