Premium Blocks – Gutenberg Blocks, Patterns & Templates

Premium Blocks – Gutenberg Blocks, Patterns & Templates has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 4 are fixed as of October 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10. 2024 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (100%).

Every one of the 4 issues recorded for Premium Blocks – Gutenberg Blocks, Patterns & Templates has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by João Pedro Soares de Alcântara.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Premium Blocks – Gutenberg Blocks, Patterns & Templates vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2026-94118

Premium Blocks – Gutenberg Blocks, Patterns & Templates <= 2.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

4 records


2026-09-23 09:45	Premium Blocks – Gutenberg Blocks, Patterns & Templates <= 2.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting Premium Blocks <= 2.3.17	`CVE-2026-94118`	6.4 Medium	benzdeus	Yes
2024-12-30 00:00	Premium Blocks – Gutenberg Blocks for WordPress <= 2.1.42 - Authenticated (Contributor+) Stored Cross-Site Scripting Premium Blocks <= 2.1.42	`CVE-2024-56245`	6.4 Medium	João Pedro Soares de Alcântara	Yes
2024-09-30 00:00	Premium Blocks – Gutenberg Blocks for WordPress <= 2.1.33 - Authenticated (Contributor+) Stored Cross-Site Scripting Premium Blocks <= 2.1.33	`CVE-2024-47368`	6.4 Medium	João Pedro Soares de Alcântara	Yes
2024-07-05 00:00	Premium Blocks – Gutenberg Blocks for WordPress <= 2.1.27 - Authenticated (Contributor+) Stored Cross-Site Scripting Premium Blocks <= 2.1.27	`CVE-2024-37519`	6.4 Medium	João G. Barbosa (4rCanJ0x!)	Yes

Showing 1–4 of 4 reports