bfintal
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Stackable – Page Builder Gutenberg Blocks | 5 | – | Nov 7, 2026 |
| Interactions – Create Interactive Experiences in the Block Editor | 1 | – | Jan 28, 2026 |
Exploited and recent CVEs
- CVE-2026-9601 Stackable <= 3.19.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'save' Parameter –
- CVE-2025-12709 Interactions – Create Interactive Experiences in the Block Editor <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
- CVE-2024-12117 Stackable – Page Builder Gutenberg Blocks <= 3.13.11 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
- CVE-2024-8760 Stackable – Page Builder Gutenberg Blocks <= 3.13.6 - Unauthenticated CSS Injection 0.4%
- CVE-2024-6296 Stackable – Page Builder Gutenberg Blocks <= 3.13.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting 0.5%
- CVE-2024-2039 Stackable – Page Builder Gutenberg Blocks <= 3.12.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Posts Block 0.4%