UL
Vendor
ultimateblocks
7
CVEs
0
On KEV
0
New 30D
Products
UB6.4
Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor
ultimateblocks
6 CVEs0 on KEV0 new
UL5.4
Ultimateblocks
Ultimateblocks
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-2918 | UB Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor ultimateblocks | 5.4 | Jun 10 | Ultimate Blocks – WordPress Blocks Plugin <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets |
| CVE-2025-1312 | UB Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor ultimateblocks | 6.4 | Mar 26 | Ultimate Blocks – WordPress Blocks Plugin <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2025-1703 | UB Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor ultimateblocks | 6.4 | Mar 26 | Ultimate Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via content Parameter |
| CVE-2024-8536 | UL Ultimateblocks Ultimateblocks | 5.4 | Sep 30 | Ultimate Blocks < 3.2.2 - Contributor+ Stored XSS |
| CVE-2024-4268 | UB Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor ultimateblocks | 5.4 | Jul 2 | Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks |
| CVE-2024-3513 | UB Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor ultimateblocks | 5.4 | Jul 2 | Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute |
| CVE-2023-6692 | UB Ultimate Blocks – 25+ Gutenberg Blocks for Block Editor ultimateblocks | 6.4 | Jun 19 | Ultimate Blocks – WordPress Blocks Plugin <= 3.0.8 - Authenticated(Contributor+) Stored Cross-Site Scripting via metabox |