Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

Vulnerabilities

• CVE-2026-2892

  Otter Blocks <= 3.1.4 - Improper Authorization to Unauthenticated Purchase Verification Bypass via Forged Cookie

  High 7.5

• CVE-2025-55715

  WordPress Otter - Gutenberg Block Plugin <= 3.1.0 - Sensitive Data Exposure Vulnerability

  High 7.5

• CVE-2024-11219

  Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.6 - Unauthetnicated Path Traversal to Arbitrary Image View

  High 7.5

• CVE-2024-10367

  Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  Medium 6.4

• CVE-2024-3725

  Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag'

  Medium 5.4

• CVE-2024-3344

  Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Author+) Limited File Upload to Stored Cross-Site Scripting

  Medium 5.4

• CVE-2024-3343

  Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attribute

  Medium 5.4

• CVE-2024-2226

  Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Medium 5.4

• CVE-2024-2841

  Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Medium 5.4

• CVE-2026-4945

  Otter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass

  Medium 5.3

• CVE-2024-51671

  WordPress Otter Blocks plugin <= 3.0.3 - Broken Access Control vulnerability

  Low 2.7