Paul Bearne

Products

ProductCVEsExploitedLatest
Author Avatars List/Block4–Apr 8, 2026

Exploited and recent CVEs

  • CVE-2026-39690 Medium 5.3 WordPress Author Avatars List/Block plugin <= 2.1.25 - Broken Access Control vulnerability 0.2%
  • CVE-2025-22804 Medium 6.5 WordPress Author Avatars List/Block plugin <= 2.1.23 - Stored Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2024-47370 Medium 6.5 WordPress Author Avatars List/Block plugin <= 2.1.21 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-49846 Medium 6.5 WordPress Author Avatars List/Block Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS) 0.4%