Block Controller

Block Controller has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it remains unpatched as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Block Controller has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2024.

All of these findings were reported by João Pedro Soares de Alcântara. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Block Controller vulnerabilities before they are exploited.

Most severe open issueCVSS 6.1CVE-2024-54208

Block Controller <= 1.4.3 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2024-12-02 00:00	Block Controller <= 1.4.3 - Reflected Cross-Site Scripting Block Controller <= 1.4.3	`CVE-2024-54208`	6.1 Medium	João Pedro Soares de Alcântara	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.4.3

Block Controller

Author

Joni Halabi

5.0(2)

100/100

Last Updated

2025-04-17 (1y ago)

Active Installs

Downloads

4,952

Requires WP

5.0+

Requires PHP

7.0+

Tested up to

WP 6.7.7

Created

2020-02-27 (7y ago)

Important notice! Due to a shift in my personal and professional priorities, I have decided to take a step back from development. As a result, this plugin is no longer being actively maintained. You are welcome to fork it and create your own updates. If you do so, please credit me as the original author. (I would also love to hear about this plugin’s new life!) All the best, Joni. — This WordPress plugin provides site administrators with the ability to turn on and off specific post editor (Gutenberg) content blocks.

View on WordPress.org