WordPress plugin
Page Builder Gutenberg Blocks – CoBlocks security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 8 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium8
- Low0
All Page Builder Gutenberg Blocks – CoBlocks vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via External iCal Feed Data ≤3.1.16Update to 3.1.17 | CVE-2026-4801 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤3.1.16Update to 3.1.17 | CVE-2026-27094 | |
| Medium4.3 | Missing Authorization ≤3.1.13Update to 3.1.14 | CVE-2025-24751 | |
| Medium4.4 | Authenticated (Editor+) Stored Cross-Site Scripting ≤3.1.12Update to 3.1.13 | CVE-2024-7132 | |
| Medium4.3 | Authenticated (Contributor+) Server-Side Request Forgery ≤3.1.11Update to 3.1.12 | CVE-2024-4260 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles ≤3.1.9Update to 3.1.10 | CVE-2024-2933 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤3.1.6Update to 3.1.7 | CVE-2024-1049 | |
| Medium6.4 | Authenticated (Contributor+) Stored Cross-Site Scripting ≤3.1.6Update to 3.1.7 | CVE-2024-2369 |
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via External iCal Feed Data
≤3.1.16Update to 3.1.17
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.1.16Update to 3.1.17
- Medium4.3Missing Authorization
≤3.1.13Update to 3.1.14
- Medium4.4Authenticated (Editor+) Stored Cross-Site Scripting
≤3.1.12Update to 3.1.13
- Medium4.3Authenticated (Contributor+) Server-Side Request Forgery
≤3.1.11Update to 3.1.12
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting via Social Profiles
≤3.1.9Update to 3.1.10
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.1.6Update to 3.1.7
- Medium6.4Authenticated (Contributor+) Stored Cross-Site Scripting
≤3.1.6Update to 3.1.7
Page Builder Gutenberg Blocks – CoBlocks: common questions
Does Page Builder Gutenberg Blocks – CoBlocks have known vulnerabilities?
Yes. VulnCrest Radar lists 8 known vulnerabilities in Page Builder Gutenberg Blocks – CoBlocks: 8 medium. None are known to affect version null.
How do I check which version of Page Builder Gutenberg Blocks – CoBlocks I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Page Builder Gutenberg Blocks – CoBlocks vulnerability?
CVE-2026-4801, published Apr 17, 2026: Page Builder Gutenberg Blocks <= 3.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via External iCal Feed Data. Severity: Medium (CVSS 6.4).
Is any Page Builder Gutenberg Blocks – CoBlocks vulnerability listed in CISA KEV?
No. None of the known Page Builder Gutenberg Blocks – CoBlocks vulnerabilities is currently listed in the CISA KEV catalog.