Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE, with AI-generated Chinese analysis, references, and POCs.

Vendor: themeisle

CVE ID Title CVSS Severity Published
CVE-2026-102002 Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget CWE-200 3.1 Low 2026-10-02
CVE-2026-4945 Otter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass CWE-639 5.3 Medium 2026-09-07
CVE-2026-2892 Otter Blocks <= 3.1.4 - Improper Authorization to Unauthenticated Purchase Verification Bypass via Forged Cookie CWE-285 7.5 High 2026-04-30
CVE-2024-11219 Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.6 - Unauthetnicated Path Traversal to Arbitrary Image View CWE-22 5.3 Medium 2024-11-27
CVE-2024-10367 Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CWE-79 6.4 Medium 2024-11-01
CVE-2024-3725 Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' CWE-79 6.4 Medium 2024-05-02
CVE-2024-3344 Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Author+) Limited File Upload to Stored Cross-Site Scripting CWE-434 6.4 Medium 2024-04-11
CVE-2024-3343 Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes CWE-79 6.4 Medium 2024-04-11
CVE-2024-2226 Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-20 6.4 Medium 2024-04-09
CVE-2024-2841 Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-03-29

All 10 known CVE vulnerabilities affecting Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE with full Chinese analysis, references, and POCs where available.