Smart Blocks – WordPress Gutenberg Blocks
Smart Blocks – WordPress Gutenberg Blocks has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (50%). Other recurring categories include Missing Authorization.
Every one of the 2 issues recorded for Smart Blocks – WordPress Gutenberg Blocks has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Smart Blocks – WordPress Gutenberg Blocks is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.
CVE-2024-49270Smart Blocks <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Smart Blocks – WordPress Gutenberg Blocks
Author
hashthemes
SmartBlocks is a light weight WordPress Plugin that adds advanced and powerful Gutenberg Blocks and opens infinite possibilities to the WordPress Gutenberg editor for anyone to create the website of their own imagination in no time without touching a single line of code. SmartBlocks has 20+ unique and beautifully designed Gutenberg blocks that extend the library of existing WordPress blocks. The plugin works with any WordPress theme and is compatible with any other WordPress plugins.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C