Advisories · Technology
wpdive Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE.
Every CVE that names wpdive Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.4 Medium
Nexa Blocks <= 1.1.1 - Unauthenticated Blind Server-Side Request Forgery via 'demo_json_file' Parameter
- wpdive Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Nexa Blocks <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Google Maps Widget
- wpdive Nexa Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Cross-site scripting (XSS)