Flex Guten – Multile Blocks
Flex Guten – Multile Blocks has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Flex Guten – Multile Blocks has a vendor fix available, so running the current release closes it.
All of these findings were reported by Peter Thaleikis. Flex Guten – Multile Blocks is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2025-6256Flex Guten <= 1.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via thumbnailHoverEffect Parameter
Read the full analysisVulnerability Records

Flex Guten – Multile Blocks
Author
Drag WP
Flex Guten allow you to add stunning design blocks on your Gutenberg website. We have built several blocks that you can use for free. We are working on more blocks that we will release here soon. Additionally, you can request new features though our support page. We will add your requested feature in next update. We are building more blocks using our check lists. If you find any bug on our plugins, you can request support through our support page.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C