OB
Product
Otter Blocks
5
CVEs
0
On KEV
7.5
Max CVSS
5
New 30D
Severity mix
Critical 0High 1Medium 4Low 0
Watch
Add Otter Blocks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-109936 New | 7.5 | Oct 23 | Otter Blocks < 3.2.8 - Unauthenticated Stored XSS via Dynamic Content Render Filter Affected: before 3.2.8 |
| CVE-2026-109933 New | 6.8 | Oct 23 | Otter Blocks < 3.2.8 - Contributor+ Stored XSS via Block Style Attributes Affected: before 3.2.8 |
| CVE-2026-109937 | 5.4 | Oct 18 | Otter Blocks < 3.2.3 - Unauthenticated Open Redirect via Stripe Checkout Block Affected: before 3.2.3 |
| CVE-2026-109935 New | 5.3 | Oct 23 | Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API Affected: before 3.2.8 |
| CVE-2026-109934 New | 5.3 | Oct 23 | Otter Blocks 3.1.1 - 3.2.7 - Unauthenticated Non-Public Content Disclosure via REST API Affected: 3.1.1 before 3.2.8 |
Showing 5