Threat database

3 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-104814Form Block · Cross-site Scripting High7.1EPSS 0.2%2026-10-06CVE Database V5CVE-2026-104814 Unauthenticated Cross Site Scripting (XSS) in Form Block <= 1.8.1 versions. EPSS 0.2%Vulnerability epiphyt #cwe-79	CVE Database V5	2026-10-06
High	7.1	EPSS 0.4%	CVE-2026-57346Embed Privacy · Path Traversal High7.1EPSS 0.4%2026-06-29CVE Database V5CVE-2026-57346 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Epiphyt Embed Privacy allows Path Traversal. This issue affects Embed Privacy: from n/a through 1.12.3. EPSS 0.4%Vulnerability Epiphyt #cwe-22	CVE Database V5	2026-06-29
Critical	9.0	EPSS 0.3%	CVE-2025-54693Form Block · Unrestricted Upload of File with Dangerous Type Critical9.0EPSS 0.3%2025-08-14CVE Database V5CVE-2025-54693 Unrestricted Upload of File with Dangerous Type vulnerability in epiphyt Form Block form-block allows Upload a Web Shell to a Web Server.This issue affects Form Block: from n/a through <= 1.5.5. EPSS 0.3%Vulnerability epiphyt	CVE Database V5	2025-08-14

Showing 1–3 of 3 results