GoDaddy
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Page Builder Gutenberg Blocks – CoBlocks | 3 | – | Apr 18, 2026 |
| CoBlocks | 2 | – | Feb 19, 2026 |
| GoDaddy Email Marketing | 1 | – | Dec 9, 2024 |
Exploited and recent CVEs
- CVE-2026-4801 Page Builder Gutenberg Blocks <= 3.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via External iCal Feed Data 0.4%
- CVE-2026-27094 WordPress CoBlocks plugin <= 3.1.16 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-24751 WordPress CoBlocks plugin <= 3.1.13 - Broken Access Control vulnerability 0.4%
- CVE-2023-49156 WordPress GoDaddy Email Marketing plugin <= 1.4.3 - Broken Access Control vulnerability 0.5%
- CVE-2024-2933 Page Builder Gutenberg Blocks – CoBlocks <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles 0.3%
- CVE-2024-1049 Page Builder Gutenberg Blocks – CoBlocks <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%