What’s Vulnerable › Products

ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor version is affected

Latest ultimateblocks Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor vulnerabilities

• CVE-2025-2918 — Ultimate Blocks – WordPress Blocks Plugin <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets (CVSS 5.4)
• CVE-2025-1312 — Ultimate Blocks – WordPress Blocks Plugin <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2025-1703 — Ultimate Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter (CVSS 6.4)
• CVE-2024-10678 — Ultimate Blocks < 3.2.4 - Contributor+ Stored XSS (CVSS 5.4)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-8536 — Ultimate Blocks < 3.2.2 - Contributor+ Stored XSS (CVSS 5.4)
• CVE-2024-6362 — Ultimate Blocks < 3.2.0 - Contributor+ Stored XSS (CVSS 4.6)
• CVE-2024-37457 — WordPress Ultimate Blocks – WordPress Blocks Plugin plugin <= 3.1.9 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-4655 — Ultimate Blocks < 3.1.9 - Contributor+ Stored XSS (CVSS 5.4)
• CVE-2024-4268 — Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks (CVSS 5.4)
• CVE-2024-3513 — Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute (CVSS 5.4)
• CVE-2023-6692 — Ultimate Blocks – WordPress Blocks Plugin <= 3.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox (CVSS 6.4)
• CVE-2024-3241 — Ultimate Blocks < 3.1.7 - Contributor+ Stored XSS (CVSS 5.4)