Plugin icon

BlockSpare – Gutenberg Blocks, AI Content Generator & Site Builder for news, magazine, blog and business sites

blockspare

Vulnerabilities:

10

Last Updated:

October 14, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-09-18
Title
BlockSpare - Gutenberg Site Builder Blocks & Starter Sites < 5.0.0 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Creation
Fixed in
Fixed in 5.0.0
CVSS
4.3 (medium)
Published
2026-04-30
Title
Freemius < 2.11.0 - Reflected DOM-Based XSS via url Parameter
Fixed in
Fixed in 3.2.8
CVSS
7.1 (high)
Published
2025-10-16
Title
Blockspare < 3.2.14 - Authenticated (Contributor+) Sensitive Information Exposure
Fixed in
Fixed in 3.2.14
CVSS
4.3 (medium)
Published
2025-07-31
Title
BlockSpare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites < 3.2.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Image Slider Widgets
Fixed in
Fixed in 3.2.13.2
CVSS
6.4 (medium)
Published
2025-05-07
Title
Blockspare < 3.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.10
CVSS
6.4 (medium)
Published
2024-09-30
Title
Blockspare < 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.5
CVSS
6.4 (medium)
Published
2024-09-03
Title
Gutenberg Page Builder Blocks & Ready-Made Patterns Library < 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.5
CVSS
6.4 (medium)
Published
2024-08-07
Title
Blockspare < 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.1
CVSS
6.4 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.6.5
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 2.0.1
CVSS
4.3 (medium)