PLUGIN SECURITY
Is Block Options safe?
EditorsKit provides a set of page building tools to supercharge the WordPress Gutenberg block editor.
What this plugin does
- Slug:
block-options - Author: Munir Kamal
- 20000+ active installs
- 92/100 rating (175 reviews on wordpress.org)
- 823657 all-time downloads
- On WordPress.org since 2018-02-27
blocksgutenberggutenberg blocksgutenberg editorwordpress blocks
Maintenance status
- Latest known version: 1.40.6
- Last updated: 2024-05-28 12:30pm GMT
- Tested up to WordPress: 6.5.10
- Requires PHP: 5.6+
⚠ Block Options hasn't been updated in over 832 days. An unmaintained plugin doesn't receive new security fixes, which is itself a security risk even without a known CVE.
Known vulnerabilities
5 known CVEs on file for Block Options. Reported between 2021 and 2024.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2024-32586 | Gutenberg Block Editor Toolkit – EditorsKit [block-options] < 1.40.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 1.40.5 | 1.40.5 | 2024-04-16 | ✓ fixed in latest |
| CVE-2024-2794 | Gutenberg Block Editor Toolkit – EditorsKit [block-options] < 1.40.5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 1.40.5 | 1.40.5 | 2024-03-29 | ✓ fixed in latest |
| CVE-2023-6635 | Gutenberg Block Editor Toolkit – EditorsKit [block-options] < 1.40.4 | Unrestricted Upload of File with Dangerous Type | High 7.2 | < 1.40.4 | 1.40.4 | 2023-12-16 | ✓ fixed in latest |
| CVE-2023-33999 | Gutenberg Block Editor Toolkit – EditorsKit [block-options] < 1.17 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 1.17 | 1.17 | 2023-07-18 | ✓ fixed in latest |
| CVE-2021-24546 | Gutenberg Block Editor Toolkit – EditorsKit [block-options] < 1.31.6 | Improper Control of Generation of Code ('Code Injection') | High 8.8 | < 1.31.6 | 1.31.6 | 2021-09-13 | ✓ fixed in latest |
How to fix it
Keep Block Options updated — 1.40.6 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Spectra Legacy – Gutenberg Blocks — 1000000+ active installs — 94/100 (1870) — max PHP 8.4
- Kadence Blocks — Page Builder Toolkit for Gutenberg Editor — 600000+ active installs — 96/100 (331) — max PHP 8.4
- Page Builder: Pagelayer – Drag and Drop website builder — 400000+ active installs — 78/100 (102) — max PHP 8.4
- Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE — 300000+ active installs — 94/100 (249)
- Page Builder Gutenberg Blocks – CoBlocks — 300000+ active installs — 86/100 (108)
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.