All Bootstrap Blocks

All Bootstrap Blocks has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; 6 are fixed and 3 remain unpatched as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (44%). Other recurring categories include Cross-Site Request Forgery (CSRF), Exposure Of Sensitive Information To An Unauthorized Actor.

6 of the records (67%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2026.

7 independent researchers contributed these findings, most of them (2) reported by Ngô Thiên An (ancorn_).

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all All Bootstrap Blocks vulnerabilities before they are exploited.

Most severe open issueCVSS 7.5CVE-2026-88994

All Bootstrap Blocks 1.3.20 - 1.3.31 - Authenticated (Contributor+) Local File Inclusion

Read the full analysis

Vulnerability Records

9 records


2026-10-09 00:00	All Bootstrap Blocks <= 1.3.31 - Authenticated (Subscriber+) Information Exposure All Bootstrap Blocks <= 1.3.31	`CVE-2026-62036`	4.3 Medium	Bao	No
2026-09-16 00:00	All Bootstrap Blocks 1.3.20 - 1.3.31 - Authenticated (Contributor+) Local File Inclusion All Bootstrap Blocks 1.3.20 – 1.3.31	`CVE-2026-88994`	7.5 High	Revanth Hari Narayana Matte	No
2026-09-16 00:00	All Bootstrap Blocks <= 1.3.31 - Authenticated (Contributor+) Stored Cross-Site Scripting All Bootstrap Blocks <= 1.3.31	`CVE-2026-88993`	6.4 Medium	Revanth Hari Narayana Matte	No
2025-08-26 00:00	All Bootstrap Blocks <= 1.3.28 - Missing Authorization All Bootstrap Blocks <= 1.3.28	`CVE-2025-54733`	5.3 Medium	Denver Jackson	Yes
2025-01-29 00:00	All Bootstrap Blocks <= 1.3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting All Bootstrap Blocks <= 1.3.26	`CVE-2024-13549`	6.4 Medium	Nishiv	Yes
2024-12-02 00:00	All Bootstrap Blocks <= 1.3.19 - Authenticated (Contributor+) Local File Inclusion All Bootstrap Blocks <= 1.3.19	`CVE-2024-53824`	8.8 High	Ngô Thiên An (ancorn_)	Yes
2024-08-16 00:00	All Bootstrap Blocks <= 1.3.19 - Authenticated (Contributor+) Stored Cross-Site Scripting All Bootstrap Blocks <= 1.3.19	`CVE-2024-43349`	6.4 Medium	Ngô Thiên An (ancorn_)	Yes
2024-05-10 00:00	All Bootstrap Blocks <= 1.3.15 - Authenticated (Contributor+) Stored Cross-Site Scripting All Bootstrap Blocks <= 1.3.15	`CVE-2024-35169`	6.4 Medium	João G. Barbosa (4rCanJ0x!)	Yes
2023-06-13 00:00	All Bootstrap Blocks <= 1.3.6 - Cross-Site Request Forgery to Plugin Settings Reset All Bootstrap Blocks <= 1.3.6	`CVE-2023-35047`	6.5 Medium	LEE SE HYOUNG	Yes

Showing 1–9 of 9 reports