PatchTheCVEcomboblocks vulnerabilities and fixes
Recent CVEs affecting comboblocks, with upgrade or downgrade steps. 3 tracked.
comboblocks has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2025-02-22. Highest priority: CVE-2024-13798 (score 30/100).
- CVE-2024-6346 MEDIUM 6.4 UPGRADE The Gutenberg Blocks, Page Builder – ComboBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scrip
- CVE-2024-4042 MEDIUM 6.4 UPGRADE The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin f
- CVE-2024-13798 MEDIUM 5.3 UPGRADE The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order crea
FAQ
How do I fix comboblocks vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is comboblocks being exploited right now?
None of the tracked comboblocks CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which comboblocks CVE should I patch first?
CVE-2024-13798 currently ranks highest (30/100): The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to unauthorized order crea.