Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.2%	CVE-2026-62036All Bootstrap Blocks · Exposure of Sensitive System Information to an Unauthorized Control Sphere Medium4.3EPSS 0.2%2026-10-09CVE Database V5CVE-2026-62036 CVE-2026-62036 is a medium severity vulnerability in AREOI All Bootstrap Blocks versions up to 1.3.31 that allows unauthorized retrieval of embedded sensitive system information. The vulnerability does not require user interaction and can be exploited remotely with low complexity but requires some privileges. It impacts confidentiality but not integrity or availability. EPSS 0.2%Vulnerability AREOI	CVE Database V5	2026-10-09
Medium	6.4	EPSS 0.2%	CVE-2024-13549All Bootstrap Blocks · Cross-site Scripting Medium6.4EPSS 0.2%2025-01-30CVE Database V5CVE-2024-13549 The All Bootstrap Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the "Accordion" widget in all versions up to, and including, 1.3.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.2%Vulnerability areoimiles #cwe-79	CVE Database V5	2025-01-30

Showing 1–2 of 2 results