ThemeHunk Vayu Blocks – Website Builder for the Block Editor

• CVE-2025-9378 Medium 6.4 Vayu Blocks <= 1.3.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Block Attributes 0.2%
• CVE-2025-4420 Medium 6.4 Vayu Blocks <= 1.3.1 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting via containerWidth Parameter 0.3%
• CVE-2024-10124 Critical 9.8 Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce <= 1.1.1 - Missing Authorization to Unauthenticated Arbitrary Plugin Installation/Activation 32.7%