PatchTheCVEultimate blocks vulnerabilities and fixes
Recent CVEs affecting ultimate blocks, with upgrade or downgrade steps. 9 tracked.
Also searched as: ultimateblocks.
ultimate blocks has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2025-06-10. Highest priority: CVE-2024-4655 (score 34/100).
- CVE-2025-2918 MEDIUM 6.4 UPGRADE The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scriptin
- CVE-2024-8536 MEDIUM 5.4 UPGRADE The Ultimate Blocks WordPress plugin before 3.2.2 does not validate and escape some of its block attributes b
- CVE-2024-6362 MEDIUM 4.6 UPGRADE The Ultimate Blocks WordPress plugin before 3.2.0 does not validate and escape some of its post-grid block at
- CVE-2024-4655 MEDIUM 5.4 UPGRADE The Ultimate Blocks WordPress plugin before 3.1.9 does not validate and escape some of its block options befo
- CVE-2024-4268 MEDIUM 6.4 UPGRADE The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scriptin
- CVE-2024-3513 MEDIUM 6.4 UPGRADE The Ultimate Blocks – WordPress Blocks Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scriptin
- CVE-2024-3241 MEDIUM 5.4 UPGRADE The Ultimate Blocks WordPress plugin before 3.1.7 does not validate and escape some of its block options befo
- CVE-2024-37457 MEDIUM 6.5 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in U
- CVE-2024-10678 MEDIUM 5.4 UPGRADE The Ultimate Blocks WordPress plugin before 3.2.4 does not validate and escape some of its block options befo
FAQ
How do I fix ultimate blocks vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ultimate blocks being exploited right now?
None of the tracked ultimate blocks CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ultimate blocks CVE should I patch first?
CVE-2024-4655 currently ranks highest (34/100): The Ultimate Blocks WordPress plugin before 3.1.9 does not validate and escape some of its block options befo.