Otter Blocks

Otter Blocks Security Releases - October 2026

otter-blocks-2026-10 Oct 1, 2026 Source: Vendor

Otter Blocks security advisories for October 2026, compiled from CVE.org records.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.cve.org/CVERecord?id=CVE-2026-109937

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1 line

Showing 1–1 of 1

CVE-2026-109937 BR2026-0000-037223 Otter Blocks unclaimed

The Otter Blocks WordPress plugin before 3.2.3 does not validate that a user-supplied return URL belongs to the site before using it to build the return destination of a Stripe Checkout session, a...

Credited as John Ryan Albon