https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T01:13:13.736024+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-17011 CVE-2026-17011 — Nexter Blocks < 5.0.2 - Contributor+ Stored CSS Injection 2026-10-09T01:13:13.751296+00:00

Affected: Unknown Nexter Blocks

The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing.