otter_blocks vulnerabilities

CVEs whose affected-version data names the otter_blocks package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109937None

today

Otter Blocks < 3.2.3 - Unauthenticated Open Redirect via Stripe Checkout Block

The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site before using it to build the return destination of a Stripe Checkout session, allowing unauthenticated attackers to red…

▾ Sunlitvia CVEORG