Skip to content
Founder-led WordPress incident response and care Request an assessment
3zerodigital Request a Website Assessment

Plugin security history

Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE Vulnerability History & Security Timeline

The Wordfence Intelligence dataset currently contains 3 vulnerability records associated with Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE, published between 2024 and 2024.

Dataset last synchronized: 2026-08-03 00:31:25 UTC

At a glance

Security Snapshot

3Total records
0Critical
0High
3Medium
0Low
0Informational
3Patched records
0Currently marked unpatched
2024-03-06First disclosure
2024-06-06Latest disclosure
3 of 3CVE coverage

Use this history

Check and watch Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE.

A history record does not establish whether the version installed on your website is affected. Enter the exact version in the checker, or add this software to a private Critical/High alert watchlist.

Year-by-Year Timeline

YearRecordsRelative volume
202433 records

Severity Breakdown

SeverityRecordsShare
Medium3100%

Vulnerability-Type Breakdown

Cross-Site Scripting

2 records66.7%

First: 2024. Latest: 2024.

Information Disclosure

1 record33.3%

First: 2024. Latest: 2024.

Patch Status

Patched
3
Currently marked unpatched
0
Unknown status
0

Patch status reflects the latest successfully synchronized source dataset and must be checked against the installed version.

Latest Known Patched Versions

  • 2.6.12
  • 2.6.4

Affected-Version History

Ranges are deduplicated by source range record and shown with the associated disclosure and known patched versions.

Affected rangeVulnerabilityPublishedPatched versionSeverity
*-2.6.11Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.11 - Authenticated (Subscriber+) Information ExposureJune 6, 20242.6.12Medium
*-2.6.3Otter Blocks PRO <= 2.6.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSSMarch 6, 20242.6.4Medium
*-2.6.3Otter Blocks PRO <= 2.6.3 - Unauthenticated Stored Cross-Site Scripting via SVG UploadMarch 6, 20242.6.4Medium

Selected source records

Latest Records

MediumCVE-2024-35682

Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.11 - Authenticated (Subscriber+) Information Exposure

Published: June 6, 2024

Affected versions
*-2.6.11
Patched versions
2.6.12
Original Wordfence record
MediumCVE-2024-1691

Otter Blocks PRO <= 2.6.3 - Unauthenticated Stored Cross-Site Scripting via SVG Upload

Published: March 6, 2024

Affected versions
*-2.6.3
Patched versions
2.6.4
Original Wordfence record
MediumCVE-2024-1684

Otter Blocks PRO <= 2.6.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSS

Published: March 6, 2024

Affected versions
*-2.6.3
Patched versions
2.6.4
Original Wordfence record

Highest-Severity Records

MediumCVE-2024-1684

Otter Blocks PRO <= 2.6.3 - Authenticated(Contributor+) Stored Cross-Site Scripting via File Field CSS

Published: March 6, 2024

Affected versions
*-2.6.3
Patched versions
2.6.4
Original Wordfence record
MediumCVE-2024-1691

Otter Blocks PRO <= 2.6.3 - Unauthenticated Stored Cross-Site Scripting via SVG Upload

Published: March 6, 2024

Affected versions
*-2.6.3
Patched versions
2.6.4
Original Wordfence record
MediumCVE-2024-35682

Otter Blocks PRO – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE <= 2.6.11 - Authenticated (Subscriber+) Information Exposure

Published: June 6, 2024

Affected versions
*-2.6.11
Patched versions
2.6.12
Original Wordfence record

View all associated vulnerabilities

Need help reviewing an exposed WordPress website?

Running an affected version does not prove that a website was compromised. Suspicious redirects, unknown administrators, injected content, unexpected files or recurring malware may require a manual investigation.

Vulnerability data: Wordfence Intelligence. Analysis and practical guidance: 3Zero Digital.

Data Source, Attribution and Methodology

This page aggregates active Production Feed records. Counts are not software-quality rankings, and an affected version does not prove exploitation or infection. Read the full methodology.

Return to the Security History Directory