Skip to content
OpenAdvisories

Vendor

blockspare

7 known vulnerabilities.

Products

Blockspare 4 BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor 2 BlockSpare – Gutenberg Blocks for News, Magazine, Blog & Business Websites 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2026-1242

    BlockSpare - Gutenberg Site Builder Blocks & Starter Sites <= 4.2.6 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Creation

    The BlockSpare plugin for WordPress is vulnerable to authorization bypass due to incorrect logic in the permission callback in all versions up to, and including, 4.2.6 due to the use of an AND (&&) operator instead of an OR (||) operator. This makes it possib…

    blockspare BlockSpare – Gutenberg Blocks for News, Magazine, Blog & Business Websites Web / CMS
  • Medium 4.3
    CVE-2025-62026

    WordPress Blockspare plugin <= 3.2.13.2 - Sensitive Data Exposure vulnerability

    Insertion of Sensitive Information Into Sent Data vulnerability in Blockspare Blockspare blockspare allows Retrieve Embedded Sensitive Data.This issue affects Blockspare: from n/a through <= 3.2.13.2.

    blockspare Blockspare
  • Medium 6.4
    CVE-2025-4684

    BlockSpare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites <= 3.2.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Image Slider Widgets

    The BlockSpare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Counters, Page Builder & Starter Site Imports, No Coding Needed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the HTML a…

    blockspare BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor Web / CMS
  • Medium 6.5
    CVE-2025-47495

    WordPress Blockspare plugin <= 3.2.9 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blockspare Blockspare blockspare allows Stored XSS.This issue affects Blockspare: from n/a through <= 3.2.9.

    blockspare Blockspare
  • Medium 6.5
    CVE-2024-47363

    WordPress Blockspare plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Blockspare Blockspare blockspare allows Stored XSS.This issue affects Blockspare: from n/a through <= 3.2.4.

    blockspare Blockspare
  • Medium 6.4
    CVE-2024-8325

    Gutenberg Page Builder Blocks & Ready-Made Patterns Library <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Blockspare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites – Post Grids, Sliders, Carousels, Counters, Page Builder & Starter Site Imports, No Coding Needed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several pa…

    blockspare BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor Web / CMS
  • Medium 6.5
    CVE-2024-43164

    WordPress Blockspare plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Blockspare allows Stored XSS.This issue affects Blockspare: from n/a through 3.2.0.

    blockspare Blockspare