Threats tagged 'ghsa-gf2c-5g46-3crp'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Low	3.8	EPSS 0.2%	CVE-2026-17011Nexter Blocks (WordPress plugin) · Insufficient Verification of Data Authenticity Low3.8EPSS 0.2%2026-08-09CVE Database V5CVE-2026-17011 The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing. EPSS 0.2%Vulnerability CWE-345 #ghsa-gf2c-5g46-3crp	CVE Database V5	2026-08-09

Page 1 of 1