Eedge22

Products

Exploited and recent CVEs

• CVE-2026-13458 Medium 6.4 GenerateBlocks <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes 0.4%
• CVE-2026-9756 Medium 6.4 GenerateBlocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Headline Block 'linkMetaFieldType' Dynamic Link Attribute 0.4%
• CVE-2026-3454 Medium 6.5 GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements 0.5%
• CVE-2025-12512 Medium 4.3 GenerateBlocks <= 2.1.2 - Authenticated (Contributor+) Information Exposure via Metadata 0.4%
• CVE-2025-11879 Medium 6.5 GenerateBlocks <= 2.1.1 - Improper Authorization to Authenticated (Contributor+) Arbitrary Options Disclosure 0.3%
• CVE-2024-13546 Medium 4.3 GenerateBlocks <= 1.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via 'get_image_description' 0.4%
• CVE-2023-6731 Medium 4.3 WP Show Posts <= 1.1.5 - Improper Authorization to Information Exposure 0.4%
• CVE-2024-1479 Medium 5.3 WP Show Posts <= 1.1.4 - Information Exposure 0.7%
• CVE-2024-1452 Medium 4.3 GenerateBlocks <= 1.8.2 - Sensitive Information Exposure 0.6%