Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Renzo Johnson Blocks plugin <= 1.6.41 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Renzo Johnson | Blocks | ≤ 1.6.41 | — |
Medium · 5.9
CVE-2023-44262
EUVD-2023-48621GHSA-7xf4-2xw8-ccxg
WordPress Blocks Plugin <= 1.6.41 is vulnerable to Cross Site Scripting (XSS)
Published Oct 2, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack