Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid, with AI-generated Chinese analysis, references, and POCs.

Vendor: wpblockart

CVE ID	Title	CVSS	Severity	Published
CVE-2026-75017	Magazine Blocks <= 1.8.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification / Site-Wide Template Takeover via Builder Templates REST Endpoint CWE-862	4.3	Medium	2026-09-18
CVE-2026-75016	Magazine Blocks <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'clientId' Block Attribute CWE-79	6.4	Medium	2026-09-18
CVE-2024-9218	Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site Scripting CWE-79	6.1	Medium	2024-10-02

All 3 known CVE vulnerabilities affecting Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid with full Chinese analysis, references, and POCs where available.