What’s Vulnerable › Products

PickPlugins ComboBlocks vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your PickPlugins ComboBlocks version is affected

Latest PickPlugins ComboBlocks vulnerabilities

• CVE-2024-13798 — Post Grid and Gutenberg Blocks – ComboBlocks <= 2.3.5 - Unauthenticated Paid Order Creation (CVSS 5.3)
• CVE-2024-43155 — WordPress ComboBlocks plugin <= 2.2.86 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-6346 — Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via redirectURL Parameter of Date Countdown Widget (CVSS 5.4)
• CVE-2024-4042 — Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel - Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute (CVSS 5.4)