Otter - Gutenberg Block
Themeisle
Developer
3.2.8
Latest version
300,000
Installations
No date
Last updated
Vulnerability history
0 present
20 patched
3 Mitigation rules
- Unauthenticated Stored XSS vulnerability< 3.2.823/10/2026
- Contributor+ Stored XSS vulnerability< 3.2.823/10/2026
- Unauthenticated Non-Public Content Disclosure vulnerability3.1.1-3.2.723/10/2026
- Unauthenticated Restricted Block Content Disclosure vulnerability< 3.2.823/10/2026
- Unauthenticated Open Redirect vulnerability< 3.2.318/10/2026
- Authenticated (Subscriber+) Sensitive Information Exposure in Form Submissions Dashboard Widget vulnerability<= 3.2.601/10/2026
- Missing Authorization to Unauthenticated Purchase Verification Bypass vulnerability<= 3.1.707/09/2026
- Improper Authorization to Unauthenticated Purchase Verification Bypass via Forged Cookie vulnerability<= 3.1.401/05/2026
- WordPress Otter - Gutenberg Block Plugin <= 3.1.0 - Sensitive Data Exposure Vulnerability<= 3.1.027/08/2025
- Unauthenicated Path Traversal to Arbitrary Image View vulnerability<= 3.0.626/11/2024
- Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability<= 3.0.401/11/2024
- Broken Access Control vulnerability<= 3.0.301/11/2024
- Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability<= 3.0.401/11/2024
- Contributor+ Stored XSS vulnerability< 2.6.618/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' vulnerability<= 2.6.917/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes vulnerability<= 2.6.815/04/2024
- Authenticated (Author+) Limited File Upload to Stored Cross-Site Scripting vulnerability<= 2.6.815/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.6.529/03/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 2.6.414/03/2024
- Wordpress Otter - Gutenberg Blocks plugin < 2.2.6 - Author+ PHAR Deserialization vulnerability< 2.2.608/05/2023