Dotcamp

12 CVEs across 2 Dotcamp products. Browse Dotcamp vulnerabilities, severities, and proof-of-concept exploits.

Dotcamp products with known CVEs

ProductCVEs
Ultimate Blocks9
Wp Table Builder3
Dotcamp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-2918Medium6.42025-06-10The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and…
CVE-2024-10678Medium5.42024-12-13The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the…
CVE-2024-8536Medium5.42024-09-30The Ultimate Blocks WordPress plugin before 3.2.2 does not validate and escape some of its block attributes before outputting them back in a page/post where t…
CVE-2024-43125Medium6.52024-08-12Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Table Builder WP Table Builder – WordPress Tabl…
CVE-2024-6362Medium4.62024-07-29The Ultimate Blocks WordPress plugin before 3.2.0 does not validate and escape some of its post-grid block attributes before outputting them back in a page/po…
CVE-2024-37457Medium6.52024-07-21Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ultimate Blocks Ultimate Blocks – Gutenberg Blocks…
CVE-2024-4655Medium5.42024-07-11The Ultimate Blocks WordPress plugin before 3.1.9 does not validate and escape some of its block options before outputting them back in a page/post where the…
CVE-2024-4268Medium6.42024-07-02The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up to…
CVE-2024-3513Medium6.42024-07-02The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title tag (postTitleTag) parameter in a…
CVE-2024-4700Medium6.42024-05-21The WP Table Builder – WordPress Table Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the button element in all versions up to, a…
CVE-2024-3241Medium5.42024-05-14The Ultimate Blocks WordPress plugin before 3.1.7 does not validate and escape some of its block options before outputting them back in a page/post where the…
CVE-2022-46852Medium5.92023-05-03Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Table Builder plugin <= 1.4.6 versions.