Zypento Blocks

Zypento Blocks has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of August 2026. Their average CVSS score is 6.4, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Zypento Blocks has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by Athiwat Tiprasaharn (Jitlada). The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.4/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Zypento Blocks vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2026-5820

Zypento Blocks <= 1.0.6 - Authenticated (Author+) Stored Cross-Site Scripting via Table of Contents Block

Read the full analysis

Vulnerability Records

1 records


2026-04-21 19:03	Zypento Blocks <= 1.0.6 - Authenticated (Author+) Stored Cross-Site Scripting via Table of Contents Block Zypento Blocks <= 1.06	`CVE-2026-5820`	6.4 Medium	Athiwat Tiprasaharn (Jitlada)	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.0.7

Zypento Blocks

Author

sproutient

0.0(0)

0/100

Last Updated

2026-05-05 (3mo ago)

Active Installs

Downloads

529

Requires WP

6.0+

Requires PHP

7.0+

Tested up to

WP 6.9.7

Created

2026-02-09 (6mo ago)

Gutenberg block library with WooCommerce product collection, slider. countdown timer and Table of Contents. CSS/JS source Unminified CSS/JS are in assets/css/src and assets/js/src. GitHub https://github.com/sproutient/zypento-blocks Clone the repository, Then to compile css/js from source, run ‘composer install’ once and whenever you want to compile, run ‘composer create-scripts’

View on WordPress.org