CVE-2025-13697 BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute

🗓️ 02 Dec 2025 01:51:56Reported by WordfenceType

vulnrichment🔗 github.com👁 7 Views

Authenticated contributors can abuse stored XSS via timestamp in BlockArt Blocks to version 2.2.13.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-13697	2 Dec 202508:16	–	circl
CNNVD	WordPress plugin BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library 跨站脚本漏洞	2 Dec 202500:00	–	cnnvd
CVE	CVE-2025-13697	2 Dec 202501:51	–	cve
Cvelist	CVE-2025-13697 BlockArt Blocks – Gutenberg Blocks, Page Builder Blocks ,WordPress Block Plugin, Sections & Template Library <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute	2 Dec 202501:51	–	cvelist
EUVD	EUVD-2025-200176	2 Dec 202501:51	–	euvd
NVD	CVE-2025-13697	2 Dec 202503:16	–	nvd
Patchstack	WordPress BlockArt Blocks plugin <= 2.2.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via `timestamp` Attribute vulnerability	1 Dec 202522:54	–	patchstack
Positive Technologies	PT-2025-48609	2 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-13697	3 Dec 202503:18	–	redhatcve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (December 1, 2025 to December 7, 2025)	11 Dec 202517:00	–	wordfence

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/b91364fa-7046-427f-84ee-6a36d49bb80f
plugins	www.plugins.trac.wordpress.org/changeset/3404884/

08 Apr 2026 17:17Current

4.6Medium risk

Vulners AI Score4.6

CVSS 3.16.4

EPSS0.00185

SSVC

cross site scripting timestamp attribute blockart blocks authenticated contributors wordpress plugin version 2.2.13