Unlimited Blocks Vulnerabilities

The Gutenberg Blocks – Unlimited blocks For Gutenberg plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages tha...

CVSS:

6.1

Affected:

up to 1.2.8

Fixed in:

1.2.9

Disclosed:

Mar 18, 2026

CVE-2026-25438 on NVD →

[en] Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ThemeHunk Gutenberg Blocks – Unlimited blocks For Gutenberg allows Stored XSS.This issue affects Gutenberg Blocks – Unlimited blocks For Gutenberg: from n/a through 1.2.7.

Affected:

up to 1.2.8

Fix:

No patched version reported

Disclosed:

Sep 17, 2024

CVE-2024-44049 on NVD →

The Gutenberg Blocks – Unlimited blocks For Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 1.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inje...

CVSS:

6.4

Affected:

up to 1.2.8

Fixed in:

1.2.9

Disclosed:

Sep 16, 2024

CVE-2024-44049 on NVD →