WP Security CheckVulnerability data as of October 25, 2026

Vulnerability alerts / October 23, 2026

Vulnerability in Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE — CVE-2026-109935

MediumSeverity
CVSS 5.3
0.1%Estimated exploit probability
EPSS
300,000+ sitesInstalls
3.2.8Fixed in

What to do now

Update Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE to 3.2.8 or later.

Affected versions

  • Everything before 3.2.8

Affected: Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE (plugin, otter-blocks)

Check: The plugin on wordpress.org / Our record for Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE

What the vulnerability is

The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to unauthorized access in all versions up to 3.2.8. This is due to a missing capability check on a function. This makes it possible for unauthenticated attackers to perform an unauthorized action.

This description is reproduced verbatim from the public vulnerability record.

Sources

Part of this record comes from Wordfence Intelligence. Original: https://www.wordfence.com/threat-intel/vulnerabilities/id/f8b33ee9-f055-4d1a-ac4f-2e67d9f0da28
Copyright 2012-2026 Defiant Inc. / Full license text

This page is compiled automatically from public databases. Accuracy is not guaranteed; confirm against the vendor advisory before acting.

See other alerts