Skip to contentKodezen Ablocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder vulnerabilities
- kodezen ablocks – gutenberg blocks, user dashboard builder, popup builder, form builder & animation builderaBlocks <= 2.18.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'headingTag' Block AttributeCVE-2026-1188006.4 Medium
- kodezen ablocks – gutenberg blocks, user dashboard builder, popup builder, form builder & animation builderaBlocks <= 2.18.0 - Authenticated (Contributor+) Sensitive Information Exposure in 'ablocks_template' ShortcodeCVE-2026-1188014.3 Medium
- kodezen ablocks – gutenberg blocks, user dashboard builder, popup builder, form builder & animation builderaBlocks <= 2.17.0 - Authenticated (Contributor+) Privilege Escalation to 'roleSlug' Block AttributeCVE-2026-1100188.8 High
- kodezen ablocks – gutenberg blocks, user dashboard builder, popup builder, form builder & animation builderaBlocks – WordPress Gutenberg Blocks <= 2.4.0 - Missing Authorization to Authenticated (Subscriber+) Settings ModificationCVE-2025-124495.4 Medium
- tusharimran ablocks, kodezen ablocks – gutenberg blocks, user dashboard builder, popup builder, form builder & animation builder +1 moreaBlocks – WordPress Gutenberg Blocks <= 1.6.1 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-134656.4 Medium