Advisories · Technology
themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE.
Every CVE that names themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.1 Low
Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget
- themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Information disclosure
- CVSS 5.3 Medium
Otter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass
- themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Broken access control
- CVSS 7.5 High
Otter Blocks <= 3.1.4 - Improper Authorization to Unauthenticated Purchase Verification Bypass via Forged Cookie
- themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Broken access control
- CVSS 5.3 Medium
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.6 - Unauthetnicated Path Traversal to Arbitrary Image View
- themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Path traversal
- CVSS 6.4 Medium
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag'
- themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Author+) Limited File Upload to Stored Cross-Site Scripting
- themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Unrestricted file upload
- CVSS 6.4 Medium
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
- themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- CWE-20
- CVSS 6.4 Medium
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
- themeisle Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE
- Cross-site scripting (XSS)
- CVSS 5.3 Medium
ThemeIsle SDK <= Various Versions - Missing Authorization
- Menu Icons by ThemeIsle
- themeisle Starter Sites & Templates by Neve
- Broken access control