Skip to content
OpenAdvisories

Vendor

burlingtonbytes

2 known vulnerabilities.

Products

WP Blockade – Visual Page Builder 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2026-3481

    WP Blockade <= 0.9.14 - Reflected Cross-Site Scripting via 'shortcode' Parameter

    The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode' parameter in all versions up to and including 0.9.14. This is due to insufficient input sanitization and output escaping in the render_shortcode_preview()…

    burlingtonbytes WP Blockade – Visual Page Builder Web / CMS
  • Medium 6.5
    CVE-2026-3480

    WP Blockade <= 0.9.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'shortcode' Parameter

    The WP Blockade plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 0.9.14. The plugin registers an admin_post action hook 'wp-blockade-shortcode-render' that maps to the render_shortcode_preview() function. This fu…

    burlingtonbytes WP Blockade – Visual Page Builder Web / CMS