VendorsDotCampultimate_blocksall versions
Vulnerabilities

DotCamp Ultimate Blocks

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

9CVEs
CVE-2024-37457
WordPress Ultimate Blocks – WordPress Blocks Plugin plugin <= 3.1.9 - Cross Site Scripting (XSS) vulnerability
Published 2024-07-21 · Modified
6.5EPSS 0.002
CVE-2024-4268
Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated(Contributor+) Stored Cross-Site Scripting via Multiple Blocks
Published 2024-07-02 · Modified
6.4EPSS 0.005
CVE-2024-3513
Ultimate Blocks – WordPress Blocks Plugin <= 3.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via title tag attribute
Published 2024-07-02 · Modified
6.4EPSS 0.003
CVE-2025-2918
Ultimate Blocks – WordPress Blocks Plugin <= 3.3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets
Published 2025-06-10 · Analyzed
6.4EPSS 0.003
CVE-2024-4655
Ultimate Blocks < 3.1.9 - Contributor+ Stored XSS
Published 2024-07-11 · Modified
6.3EPSS 0.004
CVE-2024-8536
Ultimate Blocks < 3.2.2 - Contributor+ Stored XSS
Published 2024-09-30 · Analyzed
5.4EPSS 0.004
CVE-2024-3241
Ultimate Blocks < 3.1.7 - Contributor+ Stored XSS
Published 2024-05-14 · Analyzed
5.4EPSS 0.004
CVE-2024-10678
Ultimate Blocks < 3.2.4 - Contributor+ Stored XSS
Published 2024-12-13 · Analyzed
5.4EPSS 0.003
CVE-2024-6362
Ultimate Blocks < 3.2.0 - Contributor+ Stored XSS
Published 2024-07-29 · Analyzed
4.6EPSS 0.003