Plugin icon

Custom Block Builder – Lazy Blocks

lazy-blocks

Vulnerabilities:

4

Last Updated:

June 11, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-05-19
Title
Lazy Blocks < 4.3.0 - Admin+ Stored XSS via Custom Block Frontend HTML
Fixed in
Fixed in 4.3.0
CVSS
3.5 (low)
Published
2026-02-10
Title
Custom Block Builder – Lazy Blocks < 4.2.1 - Contributor+ Remote Code Execution
Fixed in
Fixed in 4.2.1
CVSS
7.2 (high)
Published
2025-09-22
Title
Lazy Blocks < 4.1.1 - Missing Authorization
Fixed in
Fixed in 4.1.1
CVSS
4.3 (medium)
Published
2025-02-05
Title
Custom Block Builder – Lazy Blocks < 3.8.3 - Reflected XSS
Fixed in
Fixed in 3.8.3
CVSS
7.1 (high)