--- title: "Themeisle otter blocks vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/themeisle/otter-blocks type: product description: "Themeisle otter blocks has 10 published CVEs, 0 in CISA KEV and 1 with public exploits." updated: 2024-11-27 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Themeisle otter blocks vulnerabilities Vendor: [Themeisle](https://radicalnotion.ai/vendor/themeisle) - **Published CVEs:** 10 - **In CISA KEV:** 0 - **With a public exploit:** 1 - **With a patch:** 10 - **Average CVSS:** 6.3 - **First CVE:** 2024-03-13 - **Latest CVE:** 2024-11-27 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 0 | | High | 1 | | Medium | 9 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-79](https://radicalnotion.ai/cwe/cwe-79) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 6 | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 1 | | [CWE-200](https://radicalnotion.ai/cwe/cwe-200) | Exposure of Sensitive Information to an Unauthorized Actor | 1 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 | | [CWE-434](https://radicalnotion.ai/cwe/cwe-434) | Unrestricted Upload of File with Dangerous Type | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2024 | 10 | ## Affected versions | Version | Kind | CVEs | | --- | --- | --- | | \< 2.6.4 | range | 2 | | \< 2.6.6 | range | 2 | | \< 2.6.9 | range | 2 | | \< 2.6.10 | range | 1 | | \< 2.6.12 | range | 1 | | \< 2.6.5 | range | 1 | | \< 3.0.7 | range | 1 | | \<= 3.0.6 | range | 1 | | 2.6.4 | patched | 2 | | 2.6.6 | patched | 2 | | 2.6.9 | patched | 2 | | 2.6.10 | patched | 1 | | 2.6.12 | patched | 1 | | 2.6.5 | patched | 1 | | 3.0.7 | patched | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2024-11219 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE \<= 3.0.6 - Unauthetnicated Path Traversal to Arbitrary Image View | high | 7.5 | No | No | Yes | | CVE-2024-35682 | WordPress Otter Blocks PRO plugin \<= 2.6.11 - Authenticated Sensitive Data Exposure vulnerability | medium | 5.3 | No | No | Yes | | CVE-2024-3725 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE \<= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'titleTag' | medium | 6.4 | No | No | Yes | | CVE-2024-2729 | Otter Blocks \< 2.6.6 - Contributor+ Stored XSS | medium | 6.1 | No | Yes | Yes | | CVE-2024-3344 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE \<= 2.6.8 - Authenticated (Author+) Limited File Upload to Stored Cross-Site Scripting | medium | 6.4 | No | No | Yes | | CVE-2024-3343 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE \<= 2.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes | medium | 6.4 | No | No | Yes | | CVE-2024-2226 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE \<= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting | medium | 6.4 | No | No | Yes | | CVE-2024-2841 | Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE \<= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting | medium | 6.4 | No | No | Yes | | CVE-2024-1684 | Otter Blocks PRO \<= 2.6.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSS | medium | 6.4 | No | No | Yes | | CVE-2024-1691 | Otter Blocks PRO \<= 2.6.3 - Unauthenticated Stored Cross-Site Scripting via SVG Upload | medium | 6.1 | No | No | Yes | ## Frequently asked questions ### How many CVEs does Themeisle otter blocks have? Themeisle otter blocks has 10 published CVE records since 2024. ### How many Themeisle otter blocks CVEs are in CISA KEV? None of Themeisle otter blocks's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Themeisle otter blocks vulnerabilities? Yes — 1 of Themeisle otter blocks's CVEs have a known public exploit. ### Which versions of Themeisle otter blocks are affected? 15 distinct Themeisle otter blocks versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Themeisle otter blocks CVEs? Themeisle otter blocks's CVEs most often map to these CWE weakness types: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-20 (Improper Input Validation), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')). ### What is the average severity of Themeisle otter blocks CVEs? The average CVSS base score across Themeisle otter blocks's scored CVEs is 6.3. ## Other products from this vendor - [RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator](https://radicalnotion.ai/vendor/themeisle/rss-aggregator-by-feedzy-feed-to-post-autoblogging-news-and-youtube-video-feeds-aggregator) (17 CVEs) - [orbit fox](https://radicalnotion.ai/vendor/themeisle/orbit-fox) (15 CVEs) - [Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More](https://radicalnotion.ai/vendor/themeisle/orbit-fox-duplicate-page-menu-icons-svg-support-cookie-notice-custom-fonts-and-more) (14 CVEs) - [multiple page generator](https://radicalnotion.ai/vendor/themeisle/multiple-page-generator) (11 CVEs) - [Multiple Page Generator Plugin – MPG](https://radicalnotion.ai/vendor/themeisle/multiple-page-generator-plugin-mpg) (11 CVEs) - [Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE](https://radicalnotion.ai/vendor/themeisle/otter-blocks-gutenberg-blocks-page-builder-for-gutenberg-editor-and-fse) (11 CVEs) - [Redirection for Contact Form 7](https://radicalnotion.ai/vendor/themeisle/redirection-for-contact-form-7) (9 CVEs) - [rss aggregator by feedzy](https://radicalnotion.ai/vendor/themeisle/rss-aggregator-by-feedzy) (9 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/themeisle/otter-blocks). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.