Low
CVE-2026-102002
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filters
Medium
CVE-2026-4945
Otter Blocks <= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass
High
CVE-2026-2892
Otter Blocks <= 3.1.4 - Improper Authorization to Unauthenticated Purchase Verification Bypass via Forged Cookie
Medium
CVE-2025-55715
Otter - Gutenberg Block <= 3.1.0 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-11219
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.6 - Unauthetnicated Path Traversal to Arbitrary Image View
Medium
CVE-2024-51671
Otter - Gutenberg Block <= 3.0.3 - Missing Authorization
Medium
CVE-2024-10367
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 3.0.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-3725
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag'
Medium
CVE-2024-3344
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Author+) Limited File Upload to Stored Cross-Site Scripting
Medium
CVE-2024-3343
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
Medium
CVE-2024-2729
Otter Blocks <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2841
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2226
Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1047
ThemeIsle SDK <= Various Versions - Missing Authorization
High
CVE-2023-2288
Otter - Gutenberg Blocks <= 2.2.5 - Authenticated (Author+) PHAR Deserialization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.