Godaddy

11 CVEs across 5 Godaddy products. Browse Godaddy vulnerabilities, severities, and proof-of-concept exploits.

Godaddy products with known CVEs

ProductCVEs
Coblocks6
Page Builder Gutenberg Blocks – Coblocks3
Godaddy Email Marketing1
Godaddy Email Marketing1
Node-Config-Shield1
Godaddy CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-4801Medium6.42026-04-18The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via external iCal feed data in all versions up t…
CVE-2026-27094Medium6.52026-02-19Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoDaddy CoBlocks coblocks allows Stored XSS.This issue af…
CVE-2025-24751Medium4.32025-01-24Missing Authorization vulnerability in GoDaddy CoBlocks coblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoB…
CVE-2023-49156Medium4.32024-12-09Missing Authorization vulnerability in GoDaddy GoDaddy Email Marketing godaddy-email-marketing-sign-up-forms allows Exploiting Incorrectly Configured Access Co…
CVE-2024-7132Medium4.82024-08-29The Page Builder Gutenberg Blocks WordPress plugin before 3.1.13 does not escape the content of post embed via one of its block, which could allow users with…
CVE-2024-4260Medium6.52024-07-23The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could a…
CVE-2024-2933Medium6.42024-06-01The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Social Profiles widget in all versions u…
CVE-2024-2369Medium5.42024-04-02The Page Builder Gutenberg Blocks WordPress plugin before 3.1.7 does not validate and escape some of its block options before outputting them back in a page/po…
CVE-2024-1049Medium6.42024-03-23The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Widget's in all versions u…
CVE-2021-26276Medium5.32021-01-27scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendo…
CVE-2016-10903High8.82019-08-21The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.