bfintal

Products

Exploited and recent CVEs

  • CVE-2026-9601 Medium 6.4 Stackable <= 3.19.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'save' Parameter –
  • CVE-2025-12709 Medium 6.4 Interactions – Create Interactive Experiences in the Block Editor <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
  • CVE-2024-12117 Medium 6.4 Stackable – Page Builder Gutenberg Blocks <= 3.13.11 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-8760 Medium 5.3 Stackable – Page Builder Gutenberg Blocks <= 3.13.6 - Unauthenticated CSS Injection 0.4%
  • CVE-2024-6296 Medium 6.4 Stackable – Page Builder Gutenberg Blocks <= 3.13.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting 0.5%
  • CVE-2024-2039 Medium 6.4 Stackable – Page Builder Gutenberg Blocks <= 3.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Posts Block 0.4%