6.1
Medium
CVE-2024-2729 The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before…
Description
The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before appending it to the final rendered block, allowing contributors to conduct Stored XSS attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Otter Blocks 2.6 | earliest → < 2.6.6 | 2.6.6 |
| otter_blocks | Versions not published |
Other CVEs of Otter Blocks
The 6 CVEs of Otter Blocks →
CVE-2026-109936
The Otter Blocks WordPress plugin before 3.2.8 does not correctly bound a pattern it uses to rewrite its…
7.5
High
CVE-2026-109935
The Otter Blocks WordPress plugin before 3.2.8 does not enforce its block visibility conditions when a published post…
5.3
Medium
CVE-2026-109934
The Otter Blocks WordPress plugin before 3.2.8 does not correctly determine whether a post is publicly readable…
5.3
Medium
CVE-2026-109933
The Otter Blocks WordPress plugin before 3.2.8 does not properly sanitize and escape user-supplied block styling values…
6.8
Medium