WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
block-controller
Published
2024-12-02
Title
Block Controller <= 1.4.3 - Reflected Cross-Site Scripting
Slug
block-country
Published
2025-10-13
Title
Block Country <= 1.0 - Cross-Site Request Forgery
Slug
block-editor-bootstrap-blocks
Published
2024-11-20
Title
Block Editor Bootstrap Blocks < 6.6.2 - Reflected Cross-Site Scripting via tab
Slug
block-editor-gallery-slider
Published
2025-07-17
Title
Block Editor Gallery Slider < 1.1.2 - Missing Authorization to Authenticated (Subscriber+) Limited Post Meta Update
Slug
block-for-font-awesome
Published
2023-12-04
Title
Block for Font Awesome < 1.4.1 -Settings Update via CSRF
Slug
block-for-font-awesome
Published
2024-06-06
Title
Block for Font Awesome < 1.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
block-for-mailchimp
Published
2025-09-30
Title
Block For Mailchimp – Easy Mailchimp Form Integration < 1.1.13 - Unauthenticated Blind Server-Side Request Forgery
Slug
block-for-mailchimp
Published
2026-06-25
Title
Block for Mailchimp – Add Email Subscription Forms and Collect Leads < 1.1.16 - Missing Authorization
Slug
block-logic
Published
2025-03-21
Title
Block Logic < 2.0.0 - Authenticated (Contributor+) Remote Code Execution
Slug
block-options
Published
2021-09-13
Title
EditorsKit < 1.31.6 - Contributor+ Arbitrary PHP Code Execution
Slug
block-options
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
block-options
Published
2023-12-16
Title
EditorsKit < 1.40.4 - Authenticated (Administrator+) Arbitrary File Upload
Slug
block-options
Published
2024-03-29
Title
Gutenberg Block Editor Toolkit – EditorsKit < 1.40.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
block-referer-spam
Published
2023-08-23
Title
Block Referer Spam < 1.1.9.5 - Admin+ Stored XSS
Slug
block-slider
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
block-slider
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
block-slider
Published
2026-01-07
Title
Block Slider <= 2.2.3 - Missing Authorization
Slug
block-spam-by-math-reloaded
Published
2025-03-11
Title
Block Spam By Math Reloaded <= 2.2.4 - Missing Authorization
Slug
block-spam-by-math-reloaded
Published
2025-03-11
Title
Block Spam By Math Reloaded <= 2.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
block-specific-plugin-updates
Published
2023-09-27
Title
Block Update < 3.3.2 - Arbitrary Plugin Update Blocking via CSRF
Slug
block-styler-for-gravity-forms
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
block-styler-for-gravity-forms
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
block-user-account
Published
2026-08-06
Title
Block User Account < 2.0.1 - Subscriber+ Account Block Bypass via Application Passwords
Slug
block-wp-login
Published
2019-06-27
Title
Block WP Login < 1.3.2 - CSRF and Unauthorised Settings Update
Slug
blockart-blocks
Published
2024-06-06
Title
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library < 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting