← WordPress Vulnerabilities
WordPress security by component

Stackable – Page Builder Gutenberg Blocks

Stackable – Page Builder Gutenberg Blocks is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Oct 12, 2024; the highest CVE/CNA score is 6.4.

Plugin slug: stackable-page-builder-gutenberg-blocks

CVE-2024-8760: Stackable – Page Builder Gutenberg Blocks: Cross-site request forgery

Stackable – Page Builder Gutenberg Blocks is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.

PublishedOct 12, 2024
Safe version guidanceSee mitigation notes
Safe version
Oct 12, 2024 CVE-2024-8760
Stackable – Page Builder Gutenberg Blocks: Cross-site request forgery
Stackable – Page Builder Gutenberg Blocks is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE5.3
NVDPending
Apr 09, 2024 CVE-2024-2039
Stackable – Page Builder Gutenberg Blocks: Cross-site scripting
Stackable – Page Builder Gutenberg Blocks is affected by cross-site scripting. Exploitation requires an authenticated WordPress account. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.4
NVDPending