CVE-2025-13697 BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute

🗓️ 02 Dec 2025 01:51:56Reported by WordfenceType

Contributor access allows stored XSS via timestamp in BlockArt Blocks up to version 2.2.13.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-13697	2 Dec 202508:16	–	circl
CNNVD	WordPress plugin BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library 跨站脚本漏洞	2 Dec 202500:00	–	cnnvd
CVE	CVE-2025-13697	2 Dec 202501:51	–	cve
EUVD	EUVD-2025-200176	2 Dec 202501:51	–	euvd
NVD	CVE-2025-13697	2 Dec 202503:16	–	nvd
Patchstack	WordPress BlockArt Blocks plugin <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute vulnerability	1 Dec 202522:54	–	patchstack
Positive Technologies	PT-2025-48609	2 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-13697	3 Dec 202503:18	–	redhatcve
Vulnrichment	CVE-2025-13697 BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute	2 Dec 202501:51	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 1, 2025 to December 7, 2025)	11 Dec 202517:00	–	wordfence

[
  {
    "vendor": "wpblockart",
    "product": "BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "2.2.13",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3404884/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b91364fa-7046-427f-84ee-6a36d49bb80f

08 Apr 2026 17:17Current

CVSS 3.16.4

EPSS0.00156

CWE-79