bBlocks – Essential Gutenberg Blocks & Patterns Collection

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   bBlocks – Essential Gutenberg Blocks & Patterns Collection

Information

Software Type Plugin
Software Slug b-blocks (view on wordpress.org)
Software Status Active
Software Author bplugins
Software Downloads 47,852
Software Active Installs 600
Software Record Last Updated September 8, 2026

6 Vulnerabilities

Submit a Vulnerability
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
6.1
CVE-2024-13362
Apr 30, 2026
Researcher: Asaf Mozes
bBlocks – Essential Gutenberg Blocks & Patterns Collection < 2.0.30 - Missing Authorization
5.3
CVE-2026-32489
Apr 23, 2026
Researcher: w41bu1
bBlocks – Essential Gutenberg Blocks & Patterns Collection <= 2.0.31 - Authenticated (Contributor+) Privilege Escalation
8.8
CVE-2026-39579
Apr 16, 2026
Researcher: Abu Hurayra (HurayraIIT)
B Blocks <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-54708
Aug 14, 2025
Researcher: Abu Hurayra (HurayraIIT)
B Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Function
9.8
CVE-2025-8059
Aug 11, 2025
Researcher: Peter Thaleikis
B Blocks - The ultimate block collection <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-32173
Apr 4, 2025
Researcher: Logan Cote
Title Status CVE ID CVSS Researchers Date
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter Patched CVE-2024-13362 6.1 Asaf Mozes April 30, 2026
bBlocks – Essential Gutenberg Blocks & Patterns Collection < 2.0.30 - Missing Authorization Patched CVE-2026-32489 5.3 w41bu1 April 23, 2026
bBlocks – Essential Gutenberg Blocks & Patterns Collection <= 2.0.31 - Authenticated (Contributor+) Privilege Escalation Patched CVE-2026-39579 8.8 Abu Hurayra (HurayraIIT) April 16, 2026
B Blocks <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-54708 6.4 Abu Hurayra (HurayraIIT) August 14, 2025
B Blocks <= 2.0.6 - Missing Authorization to Unauthenticated Privilege Escalation via rgfr_registration Function Patched CVE-2025-8059 9.8 Peter Thaleikis August 11, 2025
B Blocks - The ultimate block collection <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-32173 6.4 Logan Cote April 4, 2025

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation