Skip to content
OpenAdvisories

Vendor

GoDaddy

6 known vulnerabilities.

Products

Page Builder Gutenberg Blocks – CoBlocks 3 CoBlocks 2 GoDaddy Email Marketing 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-4801

    Page Builder Gutenberg Blocks <= 3.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via External iCal Feed Data

    The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via external iCal feed data in all versions up to, and including, 3.1.16 due to insufficient output escaping of event titles, descriptions, and loca…

    GoDaddy Page Builder Gutenberg Blocks – CoBlocks Web / CMS
  • Medium 6.5
    CVE-2026-27094

    WordPress CoBlocks plugin <= 3.1.16 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GoDaddy CoBlocks coblocks allows Stored XSS.This issue affects CoBlocks: from n/a through <= 3.1.16.

    GoDaddy CoBlocks
  • Medium 4.3
    CVE-2025-24751

    WordPress CoBlocks plugin <= 3.1.13 - Broken Access Control vulnerability

    Missing Authorization vulnerability in GoDaddy CoBlocks coblocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoBlocks: from n/a through <= 3.1.13.

    GoDaddy CoBlocks
  • Medium 4.3
    CVE-2023-49156

    WordPress GoDaddy Email Marketing plugin <= 1.4.3 - Broken Access Control vulnerability

    Missing Authorization vulnerability in GoDaddy GoDaddy Email Marketing godaddy-email-marketing-sign-up-forms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoDaddy Email Marketing: from n/a through <= 1.4.3.

    GoDaddy GoDaddy Email Marketing
  • Medium 6.4
    CVE-2024-2933

    Page Builder Gutenberg Blocks – CoBlocks <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles

    The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Social Profiles widget in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping on user suppli…

    GoDaddy Page Builder Gutenberg Blocks – CoBlocks Web / CMS
  • Medium 6.4
    CVE-2024-1049

    Page Builder Gutenberg Blocks – CoBlocks <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Icon Widget's in all versions up to, and including, 3.1.6 due to insufficient input sanitization and output escaping on the link va…

    GoDaddy Page Builder Gutenberg Blocks – CoBlocks Web / CMS