Blockart Blocks Vulnerabilities

The BlockArt Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'clientId' block attribute in all versions up to, and including, 2.2.15. This is due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and abov...

CVSS:

6.4

Affected:

up to 2.2.15

Fixed in:

2.3.0

Disclosed:

Apr 10, 2026

CVE-2026-3498 on NVD →

The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the BlockArt Counter in all versions up to, and including, 2.2.14 due to insufficient input sanitization and output escaping on user supp...

CVSS:

6.4

Affected:

up to 2.2.14

Fixed in:

2.2.15

Disclosed:

Jan 27, 2026

CVE-2025-14283 on NVD →

The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘timestamp’ attribute in all versions up to, and including, 2.2.13 due to insufficient input sanitization and output escaping. This m...

CVSS:

6.4

Affected:

up to 2.2.13

Fixed in:

2.2.14

Disclosed:

Dec 1, 2025

CVE-2025-13697 on NVD →

The BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This make...

CVSS:

6.4

Affected:

up to 2.1.5

Fixed in:

2.1.6

Disclosed:

Jun 6, 2024

CVE-2024-35704 on NVD →