Skip to content
Themeisle Otter vulnerabilities
-
themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse
Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget
CVE-2026-102002
3.1 Low
-
themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse
Otter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass
CVE-2026-4945
5.3 Medium
-
themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse
Otter Blocks <= 3.1.4 - Improper Authorization to Unauthenticated Purchase Verification Bypass via Forged Cookie
CVE-2026-2892
7.5 High
-
themeisle otter - gutenberg block
WordPress Otter - Gutenberg Block Plugin <= 3.1.0 - Sensitive Data Exposure Vulnerability
CVE-2025-55715
7.5 High
-
themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 more
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.6 - Unauthetnicated Path Traversal to Arbitrary Image View
CVE-2024-11219
5.3 Medium
-
themeisle otter - gutenberg block
WordPress Otter Blocks plugin <= 3.0.3 - Broken Access Control vulnerability
CVE-2024-51671
2.7 Low
-
themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
CVE-2024-10367
6.4 Medium
-
themeisle otter blocks pro, otter blocks +1 more
WordPress Otter Blocks PRO plugin <= 2.6.11 - Authenticated Sensitive Data Exposure vulnerability
CVE-2024-35682
4.3 Medium
-
themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 more
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag'
CVE-2024-3725
6.4 Medium
-
themeisle otter blocks
Otter Blocks < 2.6.6 - Contributor+ Stored XSS
CVE-2024-2729
6.1 Medium
-
themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 more
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Author+) Limited File Upload to Stored Cross-Site Scripting
CVE-2024-3344
6.4 Medium
-
themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 more
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
CVE-2024-3343
6.4 Medium
-
themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 more
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-2226
6.4 Medium
-
themeisle otter blocks – gutenberg blocks, page builder for gutenberg editor & fse, otter blocks +1 more
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-2841
6.4 Medium
-
themeisle otter blocks, themisle otter blocks pro – gutenberg blocks, page builder for gutenberg editor & fse +1 more
Otter Blocks PRO <= 2.6.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSS
CVE-2024-1684
6.4 Medium
-
themeisle otter blocks, themisle otter blocks pro – gutenberg blocks, page builder for gutenberg editor & fse +1 more
Otter Blocks PRO <= 2.6.3 - Unauthenticated Stored Cross-Site Scripting via SVG Upload
CVE-2024-1691
6.1 Medium
-
optimole – optimize images in real time, super page cache, rsocial revive social – social media auto post and scheduling automation plugin +10 more +12 more
ThemeIsle SDK <= Various Versions - Missing Authorization
CVE-2024-1047
5.3 Medium
-
themeisle otter
Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization
CVE-2023-2288
EPSS 18.0%
8.8 High