WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
block-for-font-awesome
Published
2024-06-06
Title
Block for Font Awesome < 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
block-for-mailchimp
Published
2025-09-30
Title
Block For Mailchimp – Easy Mailchimp Form Integration < 1.1.13 - Unauthenticated Blind Server-Side Request Forgery
Slug
block-logic
Published
2025-03-21
Title
Block Logic < 2.0.0 - Authenticated (Contributor+) Remote Code Execution
Slug
block-options
Published
2021-09-13
Title
EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution
Slug
block-options
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
block-options
Published
2023-12-16
Title
EditorsKit < 1.40.4 - Authenticated (Administrator+) Arbitrary File Upload
Slug
block-options
Published
2024-03-29
Title
Gutenberg Block Editor Toolkit – EditorsKit < 1.40.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
block-referer-spam
Published
2023-08-23
Title
Block Referer Spam < 1.1.9.5 - Admin+ Stored XSS
Slug
block-slider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
block-slider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
block-slider
Published
2026-01-07
Title
Block Slider <= 2.2.3 - Missing Authorization
Slug
block-spam-by-math-reloaded
Published
2025-03-11
Title
Block Spam By Math Reloaded <= 2.2.4 - Missing Authorization
Slug
block-spam-by-math-reloaded
Published
2025-03-11
Title
Block Spam By Math Reloaded <= 2.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
block-specific-plugin-updates
Published
2023-09-27
Title
Block Update < 3.3.2 - Arbitrary Plugin Update Blocking via CSRF
Slug
block-styler-for-gravity-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
block-styler-for-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
block-wp-login
Published
2019-06-27
Title
Block WP Login < 1.3.2 - CSRF and Unauthorised Settings Update
Slug
blockart-blocks
Published
2024-06-06
Title
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library < 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blockart-blocks
Published
2025-12-01
Title
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library < 2.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute
Slug
blockart-blocks
Published
2026-01-27
Title
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library < 2.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocked-in-china
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blocked-in-china
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockington
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockmeister
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blockmeister
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting