Log out
Get PRO

Latest

Input validation vulnerability in IndieBlocks 0.13.2

  • Severity: medium-risk
  • Status: Open
  • Publication: June 12, 2025

The IndieBlocks plugin for WordPress has a security issue that allows for Stored Cross-Site Scripting. This means that malicious code can be injected into pages, which will run whenever a user visits that page. This vulnerability affects all versions up to and including 0.13.2, and is caused by inadequate filtering and protection of input and output data. This can be exploited by attackers with Contributor-level access or higher.

Detected in:

IndieBlocks open vulnerable versions: >= * <= 0.13.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.