GoDaddy

Products

ProductCVEsExploitedLatest
Page Builder Gutenberg Blocks – CoBlocks3–Apr 18, 2026
CoBlocks2–Feb 19, 2026
GoDaddy Email Marketing1–Dec 9, 2024

Exploited and recent CVEs

  • CVE-2026-4801 Medium 6.4 Page Builder Gutenberg Blocks <= 3.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via External iCal Feed Data 0.4%
  • CVE-2026-27094 Medium 6.5 WordPress CoBlocks plugin <= 3.1.16 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-24751 Medium 4.3 WordPress CoBlocks plugin <= 3.1.13 - Broken Access Control vulnerability 0.4%
  • CVE-2023-49156 Medium 4.3 WordPress GoDaddy Email Marketing plugin <= 1.4.3 - Broken Access Control vulnerability 0.5%
  • CVE-2024-2933 Medium 6.4 Page Builder Gutenberg Blocks – CoBlocks <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles 0.3%
  • CVE-2024-1049 Medium 6.4 Page Builder Gutenberg Blocks – CoBlocks <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%