Dwbooster Cp Blocks vulnerabilities

2 vulnerabilities

Known vulnerabilities in Dwbooster Cp Blocks, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.4CVE-2022-0448dwboostercp_blocks+2
EPSS score
5.73%
The CP Blocks WordPress plugin before 1.0.15 does not sanitise and escape its "License ID" settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.8.8CVE-2023-41732codepeoplecp blocks+2
EPSS score
0.24%
Cross-Site Request Forgery (CSRF) vulnerability in CodePeople CP Blocks plugin <= 1.0.20 versions.