Executive brief
Contributor Cross Site Scripting (XSS) in Premium Blocks – Gutenberg Blocks for WordPress <= 2.3.17 versions.
Junglewise Threat Intelligence
CVE-2026-94118: Contributor Cross Site Scripting (XSS) in Premium Blocks , Gutenberg Blocks for WordPress <= 2.3.17 versions.
CVE-2026-94118 · Severity: medium · CVSS 6.5 · Published 2026-09-23