Vulnerabilities / Otter Blocks
Otter Blocks vulnerabilities
Advisories WPSec published for Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE. Other sources may list more. Its attack surface: Otter Blocks on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1360 | Otter Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Content Magic Tags | Medium 6.4 | 3.2.8 |
| 2026-10-21 | WPSEC-2026-1359 | Otter Blocks <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Atomic Wind CSS | Medium 6.4 | 3.2.8 |
| 2026-10-21 | WPSEC-2026-1358 | Otter Blocks <= 3.2.7 - Unauthenticated Sensitive Information Exposure via otter/v1/dynamic REST Endpoint | Medium 5.3 | 3.2.8 |
| 2026-10-21 | WPSEC-2026-1357 | Otter Blocks <= 3.2.7 - Unauthenticated Block Visibility Conditions Bypass via REST API | Medium 5.3 | 3.2.8 |
| 2026-10-01 | WPSEC-2026-0033 | Otter Blocks <= 3.2.6 - Authenticated (Subscriber+) Missing Authorization to Form Submission Email Disclosure via Dashboard Widget | Medium 4.3 | 3.2.7 |
License: CC BY 4.0