WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
blockmeister
Published
2024-10-10
Title
BlockMeister – Block Pattern Builder < 3.1.11 - Reflected Cross-Site Scripting
Slug
blockonomics-bitcoin-payments
Published
2021-06-01
Title
WordPress Bitcoin Payments - Blockonomics < 3.3 - Reflected Cross-Site Scripting (XSS)
Slug
blockonomics-bitcoin-payments
Published
2023-01-03
Title
Blockonomics < 3.5.8 - Reflected Cross-Site Scripting
Slug
blockons
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockons
Published
2026-01-08
Title
Blockons <= 1.2.15 - Missing Authorization
Slug
blockons
Published
2026-01-23
Title
Blockons <= 1.2.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocks
Published
2023-10-02
Title
Blocks < 25.09.30.1006 - Admin+ Stored XSS
Slug
blocks-bakery
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blocks-bakery
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blocks-post-grid
Published
2024-11-08
Title
Blocks Post Grid <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blocks-product-editor-for-woocommerce
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockspare
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blockspare
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blockspare
Published
2024-08-07
Title
Blockspare < 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blockspare
Published
2024-09-03
Title
Gutenberg Page Builder Blocks & Ready-Made Patterns Library < 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blockspare
Published
2024-09-30
Title
Blockspare < 3.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blockspare
Published
2025-05-07
Title
Blockspare < 3.2.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
blockspare
Published
2025-07-31
Title
BlockSpare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites < 3.2.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Image Slider Widgets
Slug
blockspare
Published
2025-10-16
Title
Blockspare < 3.2.14 - Authenticated (Contributor+) Sensitive Information Exposure
Slug
blockstrap-page-builder-blocks
Published
2025-06-05
Title
BlockStrap Page Builder - Bootstrap Blocks < 0.1.37 - Contributor+ Stored XSS
Slug
blocksy-companion
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
blocksy-companion
Published
2023-01-27
Title
Blocksy Companion < 1.8.68 - Contributor+ Stored XSS
Slug
blocksy-companion
Published
2023-04-10
Title
Blocksy Companion < 1.8.82 - Subscriber+ Draft Post Access
Slug
blocksy-companion
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
blocksy-companion
Published
2024-03-21
Title
Blocksy Companion < 2.0.32 - Contributor+ Stored XSS