Blocks for Gutenberg Security & Risk Analysis

wordpress.org/plugins/blocks-for-gutenberg

Custom blocks for Gutenberg editor

200 active installs v1.0.0 PHP + WP 5.0+ Updated Dec 9, 2017
blockblockseditorgutenberg
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Blocks for Gutenberg Safe to Use in 2026?

Generally Safe

Score 85/100

Blocks for Gutenberg has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 8yr ago
Risk Assessment

The static analysis of blocks-for-gutenberg v1.0.0 indicates a very strong security posture. There are no identified attack vectors through AJAX, REST API, shortcodes, or cron events. The code demonstrates excellent security practices, with no dangerous functions used, all SQL queries employing prepared statements, and all outputs being properly escaped. Furthermore, there are no file operations, external HTTP requests, or indications of missing nonce or capability checks. The absence of taint analysis findings and zero historical CVEs further bolster this positive assessment.

This plugin appears to be exceptionally well-developed from a security perspective, exhibiting a low-risk profile. The lack of any identified vulnerabilities, both historically and in the static analysis, suggests diligent coding and thorough security considerations. The plugin's limited attack surface and adherence to secure coding principles make it a trustworthy option. While a perfect score is rare and continued vigilance is always recommended, this version of blocks-for-gutenberg presents minimal security concerns.

Vulnerabilities
None known

Blocks for Gutenberg Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Blocks for Gutenberg Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Blocks for Gutenberg Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionenqueue_block_editor_assetsblocks\sidenote\index.php:3
actionenqueue_block_assetsblocks\sidenote\index.php:22
Maintenance & Trust

Blocks for Gutenberg Maintenance & Trust

Maintenance Signals

WordPress version tested5.0.25
Last updatedDec 9, 2017
PHP min version
Downloads5K

Community Trust

Rating0/100
Number of ratings0
Active installs200
Developer Profile

Blocks for Gutenberg Developer Profile

Kuba Mikita

9 plugins · 51K total installs

76
trust score
Avg Security Score
95/100
Avg Patch Time
237 days
View full developer profile
Detection Fingerprints

How We Detect Blocks for Gutenberg

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/blocks-for-gutenberg/blocks/sidenote/block.js/wp-content/plugins/blocks-for-gutenberg/blocks/sidenote/editor.css/wp-content/plugins/blocks-for-gutenberg/blocks/sidenote/style.css
Script Paths
/wp-content/plugins/blocks-for-gutenberg/blocks/sidenote/block.js
Version Parameters
blocks-for-gutenberg/admin/sidenoteblocks-for-gutenberg/front/sidenote

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Blocks for Gutenberg