Skip to content
OpenAdvisories

Vendor

ultimateblocks

6 known vulnerabilities.

Products

Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor 6
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.4
    CVE-2025-2918

    Ultimate Blocks – WordPress Blocks Plugin <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets

    The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple widgets in all versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping. This makes it possible…

    ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor Web / CMS
  • Medium 6.4
    CVE-2025-1312

    Ultimate Blocks – WordPress Blocks Plugin <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'buttonTextColor’ parameter in all versions up to, and including, 3.2.7 due to insufficient input sanitization and output escaping. This ma…

    ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor Web / CMS
  • Medium 6.4
    CVE-2025-1703

    Ultimate Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter

    The Ultimate Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘content’ parameter in all versions up to, and including, 3.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated …

    ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor Web / CMS
  • Medium 6.4
    CVE-2024-4268

    Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks

    The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's blocks in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping on user supplied att…

    ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor Web / CMS
  • Medium 6.4
    CVE-2024-3513

    Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute

    The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title tag (postTitleTag) parameter in all versions up to, and including, 3.1.9 due to insufficient input sanitization and output escaping. …

    ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor Web / CMS
  • Medium 6.4
    CVE-2023-6692

    Ultimate Blocks – WordPress Blocks Plugin <= 3.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox

    The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's tab anchor metabox in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping on user …

    ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor Web / CMS