WPBlockArt

Products

Product	CVEs	Exploited	Latest
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library	3	–	Apr 11, 2026
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid	3	–	Sep 18, 2026
BlockArt Blocks	1	–	Jun 8, 2024
Magazine Blocks	1	–	May 16, 2024

CVE-2026-75017 Medium 4.3 Magazine Blocks <= 1.8.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification / Site-Wide Template Takeover via Builder Templates REST Endpoint 0.4%
CVE-2026-75016 Medium 6.4 Magazine Blocks <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'clientId' Block Attribute 0.3%
CVE-2026-3498 Medium 6.4 BlockArt Blocks <= 2.2.15 - Authenticated (Author+) Stored Cross-Site Scripting via 'clientId' Block Attribute 0.2%
CVE-2025-14283 Medium 6.4 BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
CVE-2025-13697 Medium 6.4 BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute 0.2%
CVE-2024-9218 Medium 6.1 Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site Scripting 0.4%
CVE-2024-35704 Medium 6.5 WordPress BlockArt Blocks plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability 0.3%
CVE-2024-34760 Medium 5.9 WordPress Magazine Blocks plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability 0.3%