CVE-2021-24632

6.1 mediumEPSS 0.8%

Medium (6.1) in wpzoom recipe card blocks for gutenberg \& elementor. EPSS 0.8% chance of exploitation in the next 30 days.

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

Severity

CVSS 3.1

6.1 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2021-09-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

wpzoom:recipe_card_blocks_for_gutenberg_\&_elementor

References

https://wpscan.com/vulnerability/55cd6d5e-92c1-407a-8c0f-f89d415ebb66
https://wpscan.com/vulnerability/55cd6d5e-92c1-407a-8c0f-f89d415ebb66

Check your stack JSON