CVE-2026-9601

The Stackable – Page Builder Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 3.19.9 . The root cause is insufficient input sanitization and output escaping within the update_block_style endpoint. This vulnerability allows au...