Rootblox – Header & Footer Builder for Full Site Editing (FSE)
Rootblox – Header & Footer Builder for Full Site Editing (FSE) has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 2 are fixed as of October 2026. Their average CVSS score is 7.3, and the most serious one scores 8.1 out of 10. Severity breakdown: 0 critical and 1 high. 2026 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include PHP Remote File Inclusion.
Every one of the 2 issues recorded for Rootblox – Header & Footer Builder for Full Site Editing (FSE) has a vendor fix available, so running the current release closes all known holes.
All of these findings were reported by Peter Tang. Rootblox – Header & Footer Builder for Full Site Editing (FSE) is installed on roughly 100 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2026-112832Rootblox – Header & Footer Builder for Full Site Editing (FSE) <= 1.0.6 - Unauthenticated Local File Inclusion
Read the full analysisVulnerability Records

Rootblox – Header & Footer Builder for Full Site Editing (FSE)
Author
CozyThemes
RootBlox is a lightweight and flexible WordPress plugin that provides a collection of ready-made header and footer patterns, allowing you to build professional layouts within minutes. Designed for the block editor, RootBlox ensures easy customization, seamless integration, and a fully responsive design. Try Rootblox on a dummy site! Features Pre-designed header and footer patterns Fully customizable with the block editor Quick and effortless setup Compatible with any FSE(Full Site Editing) based WordPress theme Sticky Header Responsive Header Options Contact Info Block Additional Icons for Nav (Search, Account, Cart, CTA) Back to top button Pro Features Premium Header/Footer patterns Advanced Sticky Header Options Advanced Responsive Header Options Custom Breakpoint for Responsive Design AJAX-powered search Dynamic Date for Copyright Text Dynamic Business Hours Block Social Icons in Mobile Menu Unlimited CTA Buttons in Mobile Menu Mobile-Specific Branding Logo Page Scroll Progress Bar Add Custom Scripts to Footer Whether you’re creating a new site or enhancing an existing one, RootBlox simplifies the process, letting you achieve a polished look without coding. License This plugin is licensed under the GPLv2 or later license. See LICENSE for more details.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C