Vulnerabilities in wpblockart
8 resultsCVE-2026-75017MEDIUMMagazine Blocks <= 1.8.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification / Site-Wide Template Takeover via Builder Templates REST EndpointEPSS 0.4%CVE-2024-9218MEDIUMMagazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site ScriptingEPSS 0.4%CVE-2026-75016MEDIUMMagazine Blocks <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'clientId' Block AttributeEPSS 0.3%CVE-2024-34760MEDIUMWordPress Magazine Blocks plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2024-35704MEDIUMWordPress BlockArt Blocks plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-14283MEDIUMBlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.14 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-13697MEDIUMBlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` AttributeEPSS 0.2%CVE-2026-3498MEDIUMBlockArt Blocks <= 2.2.15 - Authenticated (Author+) Stored Cross-Site Scripting via 'clientId' Block AttributeEPSS 0.2%