WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
block-wp-login
Published
2019-06-27
Title
Block WP Login < 1.3.2 - CSRF and Unauthorised Settings Update
Slug
blockart-blocks
Published
2024-06-06
Title
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library < 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blockart-blocks
Published
2025-12-01
Title
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library < 2.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute
Slug
blockart-blocks
Published
2026-01-27
Title
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library < 2.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blockart-blocks
Published
2026-04-10
Title
BlockArt Blocks < 2.3.0 - Authenticated (Author+) Stored Cross-Site Scripting via 'clientId' Block Attribute
Slug
blocked-in-china
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blocked-in-china
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockington
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockmeister
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blockmeister
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockmeister
Published
2024-10-10
Title
BlockMeister – Block Pattern Builder < 3.1.11 - Reflected Cross-Site Scripting
Slug
blockonomics-bitcoin-payments
Published
2021-06-01
Title
WordPress Bitcoin Payments - Blockonomics < 3.3 - Reflected Cross-Site Scripting (XSS)
Slug
blockonomics-bitcoin-payments
Published
2023-01-03
Title
Blockonomics < 3.5.8 - Reflected Cross-Site Scripting
Slug
blockonomics-bitcoin-payments
Published
2026-10-13
Title
Bitcoin Payments – Blockonomics 3.11.0 - Unauthenticated Stored Cross-Site Scripting
Slug
blockons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockons
Published
2026-01-08
Title
Blockons <= 1.2.15 - Missing Authorization
Slug
blockons
Published
2026-01-23
Title
Blockons < 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocks
Published
2023-10-02
Title
Blocks < 25.09.30.1006 - Admin+ Stored XSS
Slug
blocks-bakery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blocks-bakery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blocks-post-grid
Published
2024-11-08
Title
Blocks Post Grid <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocks-product-editor-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockspare
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blockspare
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockspare
Published
2024-08-07
Title
Blockspare < 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting