GCVE - cpe:2.3:a:unknown:ultimate_blocks:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:ultimate_blocks:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Unknown (`668ca391-a6cc-5e33-879b-83885214de33`)
Product	Ultimate Blocks (`70e234ed-0307-5147-bfce-c9a28db71f87`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-8536`	vulnerable	2026-06-08 07:00:24.884418	Ultimate Blocks < 3.2.2 - Contributor+ Stored XSS The Ultimate Blocks WordPress plugin before 3.2.2 does not validate and escape some of its block attributes before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Published: 2024-09-30T06:00:07.324Z Updated: 2024-10-01T14:28:16.521Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/abd5b6c6-f541-4739-882d-2011436f7a8b/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-6362`	vulnerable	2026-06-08 06:58:18.760484	Ultimate Blocks < 3.2.0 - Contributor+ Stored XSS The Ultimate Blocks WordPress plugin before 3.2.0 does not validate and escape some of its post-grid block attributes before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Published: 2024-07-29T06:00:07.759Z Updated: 2024-08-01T21:33:05.331Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/d2e2d06b-0f07-40b9-9b87-3373f62ae1a9/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-4655`	vulnerable	2026-06-08 06:50:18.384111	Ultimate Blocks < 3.1.9 - Contributor+ Stored XSS The Ultimate Blocks WordPress plugin before 3.1.9 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Published: 2024-07-11T06:00:02.913Z Updated: 2024-08-01T20:47:41.826Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/a0dc73b3-3c51-4d03-963f-00fa7d8b0d51/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-3241`	vulnerable	2026-06-08 06:41:52.759845	Ultimate Blocks < 3.1.7 - Contributor+ Stored XSS The Ultimate Blocks WordPress plugin before 3.1.7 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks Published: 2024-05-14T06:00:02.064Z Updated: 2024-11-07T16:24:36.657Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/a645daee-42ea-43f8-9480-ef3be69606e0/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-10678`	vulnerable	2026-06-08 06:23:47.251847	Ultimate Blocks < 3.2.4 - Contributor+ Stored XSS The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Published: 2024-12-13T06:00:02.380Z Updated: 2024-12-16T19:00:45.536Z Open on db.gcve.eu Reference links https://wpscan.com/vulnerability/9342c6a1-4f9a-45f3-911d-0dfee4657243/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.