OB
Product
Otter Blocks
10
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 9Low 0
Watch
Add Otter Blocks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-2729 | 6.1 | Apr 18 | The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before appending it to the final rendered block, allowing contributors… Affected: before 2.6.6 |
| CVE-2024-1691 | 6.1 | Mar 13 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file upload form, which… Affected: before 2.6.4 |
| CVE-2024-3725 | 5.4 | May 2 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Post Grid widget in… Affected: before 2.6.10 |
| CVE-2024-3344 | 5.4 | Apr 11 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file upload in all versions… Affected: before 2.6.9 |
| CVE-2024-3343 | 5.4 | Apr 11 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's block attributes in… Affected: before 2.6.9 |
| CVE-2024-2226 | 5.4 | Apr 9 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the id parameter in the… Affected: before 2.6.5 |
| CVE-2024-2841 | 5.4 | Mar 29 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all… Affected: before 2.6.6 |
| CVE-2024-1684 | 5.4 | Mar 13 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contact form file field CSS… Affected: before 2.6.4 |
| CVE-2024-35682 | 5.3 | Jun 8 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Themeisle Otter Blocks PRO.This issue affects Otter Blocks PRO: from n/a through 2.6.11 Affected: before 2.6.12 |
Showing 9
