VYPR

ShopEngine Gutenberg WooCommerce Builder Blocks Addon

by WordPress

CVEs (1)

  • CVE-2026-92396Nov 6, 2026
    risk 0.00cvss —epss —

    The ShopEngine Gutenberg WooCommerce Builder Blocks Addon WordPress plugin before 2.4.4 does not validate the user's capabilities or the ownership of the targeted post in one of its AJAX actions, and does not escape the stored value before outputting it in a JavaScript context,…