Ultimateblocks

7 CVEs across 1 Ultimateblocks products. Browse Ultimateblocks vulnerabilities, severities, and proof-of-concept exploits.

Ultimateblocks products with known CVEs

ProductCVEs
Ultimate Blocks – 25+ Gutenberg Blocks For Block Editor7
Ultimateblocks CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-2918Medium6.42025-06-10The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and…
CVE-2025-1312Medium6.42025-03-26The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'buttonTextColor’ parameter in all vers…
CVE-2025-1703Medium6.42025-03-26The Ultimate Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 3.2.7 d…
CVE-2022-4974Medium6.32024-10-16The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to…
CVE-2024-4268Medium6.42024-07-02The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up to…
CVE-2024-3513Medium6.42024-07-02The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title tag (postTitleTag) parameter in a…
CVE-2023-6692Medium6.42024-06-19The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tab anchor metabox in all vers…