Extension WordPress

Vulnérabilités Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

Cette page rassemble les failles publiées pour Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE, leurs plages de versions affectées et les correctifs signalés dans la base locale.

3Vulnérabilités
0Critiques
3Avec correctif
6,4CVSS maximal

Historique de sécurité

CVE et vulnérabilités de Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

3 fiches

CVE-2024-35682 Moyenne · 4,3
Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.11 – Authenticated (Subscriber+) Information Exposure

The Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.6.11. This makes it possible for authenticated attackers,…

Versions affectées

*-2.6.11

Correctif

2.6.12

Publication

06/06/2024

CVE-2024-1684 Moyenne · 6,4
Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

Otter Blocks PRO <= 2.6.3 – Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSS

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the contact form file field CSS metabox in all versions up to, and including, 2.6.3…

Versions affectées

*-2.6.3

Correctif

2.6.4

Publication

06/03/2024

CVE-2024-1691 Moyenne · 6,1
Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

Otter Blocks PRO <= 2.6.3 – Unauthenticated Stored Cross-Site Scripting via SVG Upload

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE PRO plugin for WordPress is vulnerable to Stored Cross-Site Scripting via file upload form, which allows SVG uploads, in all versions up to, and including,…

Versions affectées

*-2.6.3

Correctif

2.6.4

Publication

06/03/2024

WP Commander

Rechercher dans toute la base WordPress

Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.

Ouvrir le tableau des vulnérabilités