Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
magazine-blocks
WordPress
· Plugin
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Magazine Blocks <= 1.8.6 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification / Site-Wide Template Takeover via Builder Templates REST Endpoint
CVE-2026-75017
magazine-blocks
WordPress
Medium
Fix reported
2026-09-18
Magazine Blocks <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'clientId' Block Attribute
CVE-2026-75016
magazine-blocks
WordPress
Medium
Fix reported
2026-09-18
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.8.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2026-78290
magazine-blocks
WordPress
Medium
Fix reported
2026-08-24
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.8.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2026-57650
magazine-blocks
WordPress
Medium
Fix reported
2026-06-29
Magazine Blocks <= 1.8.3 - Missing Authorization
CVE-2026-40728
magazine-blocks
WordPress
Medium
Fix reported
2026-05-07
Magazine Blocks <= 1.3.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-56258
magazine-blocks
WordPress
Medium
Fix reported
2025-01-08
Magazine Blocks <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-50429
magazine-blocks
WordPress
Medium
Fix reported
2024-10-31
Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid <= 1.3.14 - Reflected Cross-Site Scripting
CVE-2024-9218
magazine-blocks
WordPress
Medium
Fix reported
2024-10-02
Magazine Blocks <= 1.3.6 - Authenticated (Author+) Stored Cross-Site Scripting
CVE-2024-34760
magazine-blocks
WordPress
Medium
Fix reported
2024-05-20