Convert to Blocks
Convert to Blocks has one disclosed vulnerability in the WordSec catalog, all reported in 2022; it is fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Improperly Controlled Modification Of Dynamically-Determined Object Attributes, behind 1 of the records (100%).
The one issue recorded for Convert to Blocks has a vendor fix available, so running the current release closes it.
Convert to Blocks is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
Minimist <= 1.2.5 - Prototype Pollution
Read the full analysisVulnerability Records
Convert to Blocks
Author
10up
Convert to Blocks is a WordPress plugin that transforms classic editor content to blocks on-the-fly. After installing Gutenberg or upgrading to WordPress 5.0+, your content will be displayed in “Classic Editor Blocks”. While these blocks are completely functional and will display fine on the frontend of your website, they do not empower editors to fully make use of the block editing experience. In order to do so, your classic editor posts need to be converted to blocks. This plugin does that for you “on the fly”. When an editor goes to edit a classic post, the content will be parsed into blocks. When the editor saves the post, the new structure will be saved into the database. This strategy reduces risk as you are only altering database values for content that needs to be changed. Note that Inner Blocks Transforms is only supported with the Gutenberg Plugin 10.9.0+.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C