Stackable Page Builder Gutenberg Blocks (Bfintal) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-01-22. Vendor: Bfintal.

CVEs of Stackable Page Builder Gutenberg Blocks

• CVE-2024-12117 - CVSS 6.4 (medium), 2025-01-22: The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' parameter of the Button block…
• CVE-2022-4974 - CVSS 6.3 (medium), 2024-10-16: The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to…
• CVE-2024-8760 - CVSS 5.3 (medium), 2024-10-12: The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to CSS Injection in all versions up to, and including, 3.13.6. This makes it…
• CVE-2024-6296 - CVSS 6.4 (medium), 2024-06-28: The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-caption’ parameter in all…
• CVE-2024-2039 - CVSS 6.4 (medium), 2024-04-09: The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Post(v2) block title tag in all…