WordPress Vulnerability Scanner WPSec
Vulnerabilities / Gutenberg WooCommerce Builder Blocks for ShopEngine, Variation Swatches, Wishlist, Products Compare

Gutenberg WooCommerce Builder Blocks for ShopEngine, Variation Swatches, Wishlist, Products Compare vulnerabilities

Advisories WPSec published for ShopEngine Gutenberg WooCommerce Builder Blocks Addon – All in One WooCommerce Solution. Other sources may list more. Its attack surface: Gutenberg WooCommerce Builder Blocks for ShopEngine, Variation Swatches, Wishlist, Products Compare on WPSec AttackSurface.

PublishedIDVulnerabilitySeverityFixed in
2026-11-03 WPSEC-2026-2259 Gutenberg WooCommerce Builder Blocks for ShopEngine, Variation Swatches, Wishlist, Products Compare <= 2.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'font_link' Parameter Medium 6.4 2.4.4
2026-11-03 WPSEC-2026-2258 Gutenberg WooCommerce Builder Blocks for ShopEngine, Variation Swatches, Wishlist, Products Compare <= 2.4.3 - Authenticated (Contributor+) Missing Authorization to Arbitrary Post CSS and Font Link Meta Update Medium 4.3 2.4.4

License: CC BY 4.0