ultimateblocks

Products

ProductCVEsExploitedLatest
Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor6–Jun 10, 2025

Exploited and recent CVEs

  • CVE-2025-2918 Medium 6.4 Ultimate Blocks – WordPress Blocks Plugin <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.3%
  • CVE-2025-1312 Medium 6.4 Ultimate Blocks – WordPress Blocks Plugin <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-1703 Medium 6.4 Ultimate Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter 0.3%
  • CVE-2024-4268 Medium 6.4 Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks 0.5%
  • CVE-2024-3513 Medium 6.4 Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute 0.3%
  • CVE-2023-6692 Medium 6.4 Ultimate Blocks – WordPress Blocks Plugin <= 3.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox 0.3%