Plugin icon

Vayu Blocks – Website Builder for the Gutenberg Block Editor

vayu-blocks

Vulnerabilities:

5

Last Updated:

June 24, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-09-02
Title
Vayu Blocks < 1.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Block Attributes
Fixed in
Fixed in 1.3.10
CVSS
6.4 (medium)
Published
2025-06-02
Title
Vayu Blocks < 1.3.2 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via containerWidth Parameter
Fixed in
Fixed in 1.3.2
CVSS
6.4 (medium)
Published
2025-04-07
Title
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce 1.0.4 - 1.2.1 - Missing Authorization to Unauthenticated Limited Arbitrary Options Update
Fixed in
Fixed in 1.2.2
CVSS
5.3 (medium)
Published
2025-02-03
Title
Vayu Blocks <= 1.4.4 - Contributor+ Stored XSS
Fixed in
No known fix
CVSS
5.9 (medium)
Published
2024-12-11
Title
Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce < 1.2.0 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation
Fixed in
Fixed in 1.2.0
CVSS
9.8 (critical)