WP
Vendor
wpblockart
9
CVEs
0
On KEV
0
New 30D
Products
BB6.4
BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library
wpblockart
3 CVEs0 on KEV0 new
MB6.4
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid
wpblockart
3 CVEs0 on KEV0 new
BB6.1
BlockArt Blocks
WPBlockArt
2 CVEs0 on KEV0 new
MB6.5
Magazine Blocks
WPBlockart
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-75017 | MB Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid wpblockart | 4.3 | Sep 18 | Magazine Blocks <= 1.8.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification / Site-Wide Template Takeover via Builder Templates REST Endpoint |
| CVE-2026-75016 | MB Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid wpblockart | 6.4 | Sep 18 | Magazine Blocks <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'clientId' Block Attribute |
| CVE-2026-3498 | BB BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library wpblockart | 6.4 | Apr 11 | BlockArt Blocks <= 2.2.15 - Authenticated (Author+) Stored Cross-Site Scripting via 'clientId' Block Attribute |
| CVE-2025-14283 | BB BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library wpblockart | 6.4 | Jan 28 | BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.14 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-13697 | BB BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library wpblockart | 6.4 | Dec 2 | BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute |
| CVE-2024-9218 | MB Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid wpblockart | 6.1 | Oct 2 | Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site Scripting |
| CVE-2024-35704 | BB BlockArt Blocks WPBlockArt | 5.4 | Jun 8 | WordPress BlockArt Blocks plugin <= 2.1.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2024-34760 | MB Magazine Blocks WPBlockart | 6.5 | May 16 | WordPress Magazine Blocks plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability |