CVE-2024-8760

The Stackable – Page Builder Gutenberg Blocks plugin for WordPress contains a vulnerability in all versions up to 3.13.6 that allows unauthenticated attackers to inject malicious CSS code into comments, potentially leading to data theft and CSRF attacks within a short timeframe. This issue could be exploited to obtain sensitive information such as admin nonces, which might be used to compromise other plugins lacking adequate capability checks for AJAX actions or lower-privileged user access.

Based on public CVE data (MITRE/NVD).