cleantalk
Vulnerabilities and Security Researches

SKT Blocks – Gutenberg based Page Builder, CVE-2025-26998

CVE, Research URL

CVE-2025-26998

Home page URL

Security reports for SKT Blocks – Gutenberg based Page Builder

Application

SKT Blocks – Gutenberg based Page Builder

Published on
Apr 16, 2025
Research Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sonalsinha21 SKT Blocks – Gutenberg based Page Builder allows Stored XSS. This issue affects SKT Blocks – Gutenberg based Page Builder: from n/a through 1.8.
Affected versions
Min -, max 1.9.
Status
vulnerable
Previous vulnerability researches
Management App for WooCommerce – Order notifications, Order management, Lead management, Uptime Monitoring (CVE-2024-1205) , Jun 07, 2024
ManageWP Worker , Jan 29, 2025
ManageWP Worker (789a6ab801477af9ad5fe7f355a0f14114bd6d5f) , Jun 06, 2024
New vulnerability
Cost Calculator Builder (CVE-2025-39587) , Apr 19, 2025
Klarna Checkout for WooCommerce (CVE-2024-13925) , Apr 19, 2025
WordPress Button Plugin MaxButtons (CVE-2025-39444) , Apr 19, 2025
Course Booking System (CVE-2025-32508) , Apr 19, 2025
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Wo (CVE-2025-39588) , Apr 19, 2025