Browse all 6 CVE security advisories affecting blockspare. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Blockspare operates as a blockchain development platform, primarily serving businesses seeking custom blockchain solutions. Historically, the platform has been vulnerable to multiple security classes, including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation vulnerabilities, as evidenced by its six recorded CVEs. These weaknesses often stem from insufficient input validation and improper access controls in its smart contract templates and web interfaces. While no major public security incidents have been widely reported, the consistent pattern of vulnerabilities suggests ongoing challenges in secure coding practices, potentially exposing client deployments to exploitation if not properly patched or configured.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-4684 | BlockSpare: Gutenberg Blocks & Patterns for Blogs, Magazines, Business Sites <= 3.2.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Carousel and Image Slider Widgets — BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block EditorCWE-79 | 6.4 | Medium | 2025-08-01 |
| CVE-2024-8325 | Gutenberg Page Builder Blocks & Ready-Made Patterns Library <= 3.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting — BlockSpare — News, Magazine and Blog Addons for (Gutenberg) Block EditorCWE-79 | 6.4 | Medium | 2024-09-04 |
This page lists every published CVE security advisory associated with blockspare. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.