sonalsinha21 Vulnerabilities and Affected Products
Vulnerabilities associated with SKT Blocks.
Products
Clear product- SKT Blocks6 vulnerabilities
- SKT Addons for Elementor4 vulnerabilities
- SKT Skill Bar4 vulnerabilities
- SKT Page Builder3 vulnerabilities
- Posterity2 vulnerabilities
- Recover abandoned cart for WooCommerce2 vulnerabilities
- SKT Blocks – Gutenberg based Page Builder2 vulnerabilities
- Admire Extra1 vulnerability
- Barter1 vulnerability
- Bicycleshop1 vulnerability
- SKT Donation1 vulnerability
- SKT PayPal for WooCommerce1 vulnerability
- SKT Templates – 100% Free Templates for Elementor & Gutenberg1 vulnerability
- SKT Templates – Elementor & Gutenberg templates1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-60138MEDIUM | WordPress SKT Blocks plugin <= 2.6 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 2.6. CWE-79Sep 26, 2025 | CVSS6.5v3.1 | EPSS0.196% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-48270MEDIUM | WordPress SKT Blocks plugin <= 2.2 - Cross Site Scripting (XSS) VulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows DOM-Based XSS.This issue affects SKT Blocks: from n/a through <= 2.2. CWE-79May 19, 2025 | CVSS6.5v3.1 | EPSS0.194% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-46235MEDIUM | WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 2.0 - Cross Site Scripting (XSS) VulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 2.0. CWE-79Apr 22, 2025 | CVSS6.5v3.1 | EPSS0.209% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-26998MEDIUM | WordPress SKT Blocks – Gutenberg based Page Builder plugin <= 1.8 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 1.8. CWE-79Apr 15, 2025 | CVSS6.5v3.1 | EPSS0.254% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-26771MEDIUM | WordPress SKT Blocks plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through <= 1.7. CWE-79Feb 17, 2025 | CVSS6.5v3.1 | EPSS0.21% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-48036MEDIUM | WordPress SKT Blocks plugin <= 1.6 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks skt-blocks.This issue affects SKT Blocks: from n/a through <= 1.6. CWE-79Oct 17, 2024 | CVSS6.5v3.1 | EPSS0.224% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |