Skip to content
OpenAdvisories

Product · Vektor

VK Block Patterns

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-32826

    WordPress VK Block Patterns plugin <= 1.31.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Vektor,Inc. VK Block Patterns.This issue affects VK Block Patterns: from n/a through 1.31.0.

    Vektor VK Block Patterns
  • Medium 4.3
    CVE-2024-0623 Public exploit

    VK Block Patterns <= 1.31.1.1 - Cross-Site Request Forgery

    The VK Block Patterns plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.31.1.1. This is due to missing or incorrect nonce validation on the vbp_clear_patterns_cache() function. This makes it possible for …

    Vektor VK Block Patterns Web / CMS