https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:54:58.485754+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-6362 CVE-2024-6362 — Ultimate Blocks < 3.2.0 - Contributor+ Stored XSS 2026-10-06T07:54:58.487274+00:00

Affected: Unknown Ultimate Blocks, dotcamp ultimate_blocks

The Ultimate Blocks WordPress plugin before 3.2.0 does not validate and escape some of its post-grid block attributes before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks