Skip to content
OpenAdvisories

Vendor

shafayat-alam

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.4

    Gutenberg Blocks and Page Layouts – Attire Blocks <= 1.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Gutenberg Blocks and Page Layouts – Attire Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'attire-blocks/post-carousel' block in all versions up to, and including, 1.9.5 due to insufficient input sanitization and output e…

  • Medium 4.3

    Gutenberg Blocks and Page Layouts – Attire Blocks <= 1.9.2 - Missing Authorization

    The Gutenberg Blocks and Page Layouts – Attire Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the disable_fe_assets function in all versions up to, and including, 1.9.2. This makes it possib…