Unknown Otter Blocks vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Otter Blocks, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.4CVE-2026-109937unknownotter blocks
EPSS score
0.14%
The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site before using it to build the return destination of a Stripe Checkout session, allowing unauthenticated attackers to redirect victims who complete or cancel checkout to an arbitrary external URL.6.4CVE-2024-2729themeisleotter_blocks+2
EPSS score
0.42%
The Otter Blocks WordPress plugin before 2.6.6 does not properly escape its mainHeadings blocks' attribute before appending it to the final rendered block, allowing contributors to conduct Stored XSS attacks.