Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 19:55:29 +0000 CVE-2026-17011 — Nexter Blocks < 5.0.2 - Contributor+ Stored CSS Injection https://cve.radiocsirt.org/vuln/cve-2026-17011 <p><strong>Affected:</strong> Unknown Nexter Blocks</p> <p>The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing.</p> <p><strong>Affected:</strong> Unknown Nexter Blocks</p> <p>The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who can save global CSS through one of its REST endpoints, allowing users with at least the Contributor role to store arbitrary CSS that is rendered site-wide on the front end, enabling defacement, content hiding, and UI redressing.</p> https://cve.radiocsirt.org/vuln/cve-2026-17011