Skip to content

pubudu-malalasekara

Products

Product	CVEs	Exploited	Latest
Post Blocks & Tools	2	–	Apr 8, 2026

Exploited and recent CVEs

CVE-2026-5711 Medium 6.4 Post Blocks & Tools <= 1.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'sliderStyle' Block Attribute 0.2%
CVE-2025-11828 Medium 6.4 Magazine Companion <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%