Plugin icon

Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor

ultimate-blocks

Vulnerabilities:

17

Last Updated:

March 12, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2025-06-16
Title
Ultimate Blocks < 3.3.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.7
CVSS
6.4 (medium)
Published
2025-06-09
Title
Ultimate Blocks – WordPress Blocks Plugin < 3.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Fixed in
Fixed in 3.3.4
CVSS
6.4 (medium)
Published
2025-05-19
Title
Ultimate Blocks < 3.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.1
CVSS
6.4 (medium)
Published
2025-05-07
Title
Ultimate Blocks < 3.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.3.0
CVSS
6.4 (medium)
Published
2025-03-28
Title
Ultimate Blocks < 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.8
CVSS
6.4 (medium)
Published
2025-03-25
Title
Ultimate Blocks < 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter
Fixed in
Fixed in 3.2.8
CVSS
6.4 (medium)
Published
2025-03-25
Title
Ultimate Blocks – WordPress Blocks Plugin < 3.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 3.2.8
CVSS
6.4 (medium)
Published
2024-11-22
Title
Ultimate Blocks < 3.2.4 - Contributor+ Stored XSS
Fixed in
Fixed in 3.2.4
CVSS
5.1 (medium)
Published
2024-09-09
Title
Ultimate Blocks < 3.2.2 - Contributor+ Stored XSS
Fixed in
Fixed in 3.2.2
CVSS
5.9 (medium)
Published
2024-07-08
Title
Ultimate Blocks < 3.2.0 - Contributor+ Stored XSS
Fixed in
Fixed in 3.2.0
CVSS
6.8 (medium)
Published
2024-07-01
Title
Ultimate Blocks – WordPress Blocks Plugin < 3.2.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks
Fixed in
Fixed in 3.2.0
CVSS
6.4 (medium)
Published
2024-07-01
Title
Ultimate Blocks – WordPress Blocks Plugin < 3.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute
Fixed in
Fixed in 3.2.0
CVSS
6.4 (medium)
Published
2024-06-20
Title
Ultimate Blocks < 3.1.9 - Contributor+ Stored XSS
Fixed in
Fixed in 3.1.9
CVSS
5.9 (medium)
Published
2024-06-18
Title
Ultimate Blocks – WordPress Blocks Plugin < 3.1.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox
Fixed in
Fixed in 3.1.1
CVSS
6.4 (medium)
Published
2024-04-23
Title
Ultimate Blocks < 3.1.7 - Contributor+ Stored XSS
Fixed in
Fixed in 3.1.7
CVSS
5.9 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.0.1
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 2.4.13
CVSS
4.3 (medium)