shopengine_gutenberg_woocommerce_builder_blocks_addon vulnerabilities

CVEs whose affected-version data names the shopengine_gutenberg_woocommerce_builder_blocks_addon package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92396Medium· 6.8

yesterday

Blocks for ShopEngine < 2.4.4 - Contributor+ Stored XSS via gutenova_store_css

The ShopEngine Gutenberg WooCommerce Builder Blocks Addon WordPress plugin before 2.4.4 does not validate the user's capabilities or the ownership of the targeted post in one of its AJAX actions, and does not escape the stored value bef…

▾ SunlitEPSS 0.24%via CVEORG