PLUGIN SECURITY
Is Stackable Ultimate Gutenberg Blocks safe?
The complete website builder for the WordPress block editor. Build professional sites faster with powerful blocks, block styles, and a global design s …
What this plugin does
- Slug:
stackable-ultimate-gutenberg-blocks - Author: Benjamin Intal
- 100000+ active installs
- 98/100 rating (521 reviews on wordpress.org)
- 5512271 all-time downloads
- On WordPress.org since 2018-02-17
blocksgutenberggutenberg blockspage builderwordpress blocks
Maintenance status
- Latest known version: 3.19.10
- Last updated: 2026-08-20 1:23pm GMT
- Tested up to WordPress: 7.1
- Requires PHP: 7.4+
Known vulnerabilities
8 known CVEs on file for Stackable Ultimate Gutenberg Blocks. Reported between 2022 and 2026.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-47500 | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.19.6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 5.9 | < 3.19.6 | 3.19.6 | 2026-01-07 | ✓ fixed in latest |
| CVE-2025-60095 | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.19.0 | Insertion of Sensitive Information Into Sent Data | Medium 4.3 | < 3.19.0 | 3.19.0 | 2025-09-26 | ✓ fixed in latest |
| CVE-2025-60094 | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.19.0 | Missing Authorization | Medium 4.3 | < 3.19.0 | 3.19.0 | 2025-09-26 | ✓ fixed in latest |
| CVE-2024-12117 | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.13.12 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 3.13.12 | 3.13.12 | 2025-01-21 | ✓ fixed in latest |
| CVE-2024-8760 | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.13.7 | Improper Control of Generation of Code ('Code Injection') | Medium 5.3 | < 3.13.7 | 3.13.7 | 2024-10-11 | ✓ fixed in latest |
| CVE-2024-6296 | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.13.2 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 3.13.2 | 3.13.2 | 2024-06-27 | ✓ fixed in latest |
| CVE-2024-2039 | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.12.12 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 3.12.12 | 3.12.12 | 2024-03-28 | ✓ fixed in latest |
| CVE-2023-33999 | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.10.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 3.10.0 | 3.10.0 | 2023-07-18 | ✓ fixed in latest |
+ 4 more known vulnerabilities
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| — | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.1.5 | Missing Authorization | Medium 6.3 | < 3.1.5 | 3.1.5 | 2022-03-04 | ✓ fixed in latest |
| — | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.1.5 | — | Unknown | < 3.1.5 | 3.1.5 | 2022-02-28 | ✓ fixed in latest |
| — | Stackable – Page Builder Gutenberg Blocks [stackable-ultimate-gutenberg-blocks] < 3.1.5 | — | Unknown | < 3.1.5 | 3.1.5 | 2022-02-28 | ✓ fixed in latest |
| — | Unauthorised AJAX Calls via Freemius | — | Unknown | < 3.1.5 | 3.1.5 | — | ✓ fixed in latest |
How to fix it
Keep Stackable Ultimate Gutenberg Blocks updated — 3.19.10 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Elementor Website Builder – more than just a page builder — 10000000+ active installs — 90/100 (7296)
- Spectra Legacy – Gutenberg Blocks — 1000000+ active installs — 94/100 (1870) — max PHP 8.4
- Website Builder by SeedProd — Theme Builder, Landing Page Builder, Coming Soon Page, Maintenance Mode — 700000+ active installs — 98/100 (4699) — max PHP <8.0
- Kadence Blocks — Page Builder Toolkit for Gutenberg Editor — 600000+ active installs — 96/100 (330) — max PHP 8.4
- Kirki – Freeform Page Builder, Website Builder & Customizer — 500000+ active installs — 90/100 (81) — max PHP <8.0
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.