Blockspare vulnerabilities

CVEs per yearBy the year they were published

1. 20244
2. 20253
3. 20262

Newest CVEs

• CVE-2026-1242

  BlockSpare - Gutenberg Site Builder Blocks & Starter Sites <= 4.2.6 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Creation

  blockspare · BlockSpare – Gutenberg Blocks for News, Magazine, Blog & Business Websites

  Medium4.3
• CVE-2024-13362

  Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter

  sebet · Go Fetch Jobs (for WP Job Manager)

  Medium6.1
• CVE-2025-62026

  WordPress Blockspare plugin <= 3.2.13.2 - Sensitive Data Exposure vulnerability

  Blockspare · Blockspare

  Medium4.3
• CVE-2025-4684

  BlockSpare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites <= 3.2.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Image Slider Widgets

  blockspare · BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor

  Medium6.4
• CVE-2025-47495

  WordPress Blockspare plugin <= 3.2.9 - Cross Site Scripting (XSS) Vulnerability

  Blockspare · Blockspare

  Medium6.5
• CVE-2022-4974

  Freemius SDK <= 2.4.2 - Missing Authorization Checks

  dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress

  Medium6.3
• CVE-2024-47363

  WordPress Blockspare plugin <= 3.2.4 - Cross Site Scripting (XSS) vulnerability

  Blockspare · Blockspare

  Medium6.5
• CVE-2024-8325

  Gutenberg Page Builder Blocks & Ready-Made Patterns Library <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

  blockspare · BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block Editor

  Medium6.4
• CVE-2024-43164

  WordPress Blockspare plugin <= 3.2.0 - Cross Site Scripting (XSS) vulnerability

  Blockspare · Blockspare

  Medium6.5