Does CM Blocks have any unpatched vulnerabilities?

No. All known vulnerabilities in CM Blocks have been patched as of the latest data update. Always keep the plugin updated to the latest version.

Is CM Blocks compatible with WordPress 6.8.5?

According to WordPress.org data, CM Blocks 3.1.0 has been tested up to WordPress 6.8.5. Check the plugin's changelog for the latest compatibility information.

Is CM Blocks compatible with PHP 7.4+?

CM Blocks requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is CM Blocks updated?

CM Blocks was last updated on May 30, 2025. Frequent updates are generally a positive security signal.

What is CM Blocks's security score?

CM Blocks has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

CM Blocks Security & Risk Analysis

wordpress.org/plugins/cm-blocks

CM Blocks is a collection of page building blocks for WordPress block editor.

200 active installs v3.1.0 PHP 7.4+ WP 6.6+ Updated May 30, 2025

blocksgutenberggutenberg-blockspage-builderwordpress-blocks

A · Safe

CVEs total0

Unpatched0

Last CVENever

Download

Safety Verdict

Is CM Blocks Safe to Use in 2026?

Generally Safe

Score 100/100

CM Blocks has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago

Risk Assessment

The "cm-blocks" plugin version 3.1.0 exhibits a generally good security posture, demonstrating a commitment to secure coding practices. The vast majority of SQL queries are prepared, output escaping is highly effective, and there are no critical or high severity taint flows identified. Furthermore, the plugin has a clean vulnerability history with zero known CVEs, indicating consistent security maintenance. The presence of numerous capability checks and nonces suggests a thoughtful approach to access control and request verification.

Key Concerns

Unprotected REST API routes
Unprotected AJAX handlers
SQL queries not using prepared statements (14%)
Output escaping not fully implemented (3%)

Vulnerabilities

None known

CM Blocks Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Code Analysis

Analyzed Mar 16, 2026

CM Blocks Code Analysis

Dangerous Functions

Raw SQL Queries

6 prepared

Unescaped Output

132 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

SQL Query Safety

86% prepared7 total queries

Output Escaping

97% escaped136 total outputs

Data Flows

All sanitized

Data Flow Analysis

2 flows

license_check (includes\License.php:52)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

4 unprotected

CM Blocks Attack Surface

Entry Points17

Unprotected4

AJAX Handlers 3

authwp_ajax_cmblocks_dismiss_noticeincludes\Dashboard.php:18

authwp_ajax_license_checkincludes\License.php:14

authwp_ajax_install_plugin_actionincludes\PluginInstaller.php:24

REST API Routes 14

GET/wp-json/cm-blocks/v1/design-library/favorite(?:/(?P<type>patterns|pages|kits))?includes\Rest\DesignLibrary\Favorites.php:64

GET/wp-json/cm-blocks/v1/design-library/favorite/(?P<type>patterns|pages|kits)/(?P<id>\d+)includes\Rest\DesignLibrary\Favorites.php:74

GET/wp-json/cm-blocks/v1/design-library/favorite/(?P<type>patterns|pages|kits)/(?P<id>\d+)includes\Rest\DesignLibrary\Favorites.php:85

GET/wp-json/cm-blocks/v1/design-library/resourceincludes\Rest\DesignLibrary\Resource.php:26

GET/wp-json/cm-blocks/v1/design-library/settingsincludes\Rest\DesignLibrary\Settings.php:24

GET/wp-json/cm-blocks/v1/detailsincludes\Rest\Details.php:20

GET/wp-json/cm-blocks/v1/headerincludes\Rest\Header.php:21

GET/wp-json/cm-blocks/v1/scroll-to-topincludes\Rest\ScrollToTop.php:30

GET/wp-json/cm-blocks/v1/scroll-to-topincludes\Rest\ScrollToTop.php:36

GET/wp-json/cm-blocks/v1/site-settingsincludes\Rest\SiteSettings.php:28

GET/wp-json/cm-blocks/v1/site-settingsincludes\Rest\SiteSettings.php:34

GET/wp-json/cm-blocks/v1/user-rolesincludes\Rest\UserRoles.php:23

GET/wp-json/cm-blocks/v1/visibility/screen-sizesincludes\Rest\Visibility.php:31

GET/wp-json/cm-blocks/v1/visibility/previewincludes\Rest\Visibility.php:47

WordPress Hooks 43

actionadmin_menuincludes\Admin.php:14

actionadmin_enqueue_scriptsincludes\Admin.php:15

actionplugins_loadedincludes\Bootstrap.php:22

actionadmin_initincludes\Bootstrap.php:26

filterplugin_action_linksincludes\Bootstrap.php:41

filterblock_categories_allincludes\Bootstrap.php:42

actioninitincludes\Bootstrap.php:43

actioninitincludes\Bootstrap.php:44

actionwp_enqueue_scriptsincludes\Bootstrap.php:45

actionadmin_noticesincludes\Dashboard.php:17

actionadmin_enqueue_scriptsincludes\Dashboard.php:19

actioninitincludes\Database\FavoritesDB.php:22

actionadmin_enqueue_scriptsincludes\Editor.php:14

actionenqueue_block_assetsincludes\Editor.php:15

filterrest_pre_dispatchincludes\Editor.php:16

actionwp_enqueue_scriptsincludes\Enhancement\Animation.php:15

filterrender_blockincludes\Enhancement\Animation.php:16

filterrender_blockincludes\Enhancement\BlockVisibility\BlockVisibility.php:13

actionwp_headincludes\Enhancement\BlockVisibility\MediaQuery.php:22

actioncmblocks_visibility_render_block_contentincludes\Enhancement\BlockVisibility\MediaQuery.php:23

filtercmblocks_visibility_render_block_contentincludes\Enhancement\BlockVisibility\UserRoles.php:15

actiontemplate_redirectincludes\Enhancement\MaintenanceMode.php:15

actionwp_enqueue_scriptsincludes\Enhancement\ScrollToTop.php:17

actionwp_footerincludes\Enhancement\ScrollToTop.php:18

filterrender_block_core/template-partincludes\Enhancement\StickyHeader.php:15

actionwp_enqueue_scriptsincludes\Enhancement\StickyHeader.php:16

filterimage_sideload_extensionsincludes\Importer\ImageImporter.php:18

actionenqueue_block_assetsincludes\Importer\Importer.php:12

actionrest_api_initincludes\Kits\RestHandler.php:23

actioninitincludes\License.php:15

actioninitincludes\License.php:16

actioncm_license_check_hookincludes\License.php:17

actioninitincludes\Patterns.php:15

actioninitincludes\Patterns.php:17

actionrest_api_initincludes\Rest\DesignLibrary\Favorites.php:23

actionrest_api_initincludes\Rest\DesignLibrary\Resource.php:21

actionrest_api_initincludes\Rest\DesignLibrary\Settings.php:20

actionrest_api_initincludes\Rest\Details.php:16

actionrest_api_initincludes\Rest\Header.php:17

actionrest_api_initincludes\Rest\ScrollToTop.php:25

actionrest_api_initincludes\Rest\SiteSettings.php:23

actionrest_api_initincludes\Rest\UserRoles.php:16

actionrest_api_initincludes\Rest\Visibility.php:22

Scheduled Events 1

cm_license_check_hook

Maintenance & Trust

CM Blocks Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5

Last updatedMay 30, 2025

PHP min version7.4

Downloads6K

Community Trust

Rating0/100

Number of ratings0

Active installs200

Alternatives

CM Blocks Alternatives

Page Builder Gutenberg Blocks – CoBlocks

coblocks

CoBlocks is a suite of page builder WordPress blocks for Gutenberg, with 10+ new blocks and a true page builder experience with rows and columns.

300K 1 unpatched

Stackable – Page Builder Gutenberg Blocks

stackable-ultimate-gutenberg-blocks

Custom Blocks that transform your WordPress Block Editor into a page builder

100K 7 CVEs

GutenKit – Page Builder Blocks, Patterns, and Templates for Gutenberg Block Editor

gutenkit-blocks-addon

GutenKit – Ultimate no-code Gutenberg blocks to design stunning web pages and visually stunning posts in WordPress block editor.

70K 3 CVEs

Gutentor – Gutenberg Blocks – Page Builder for Gutenberg Editor

gutentor

Advanced yet easy, Gutenberg editor page builder blocks. Create a masterpiece, pixel perfect website using modern WordPress Gutenberg blocks.

30K 1 unpatched

Nexter Blocks – Gutenberg Blocks, Page Builder & AI Website Builder

the-plus-addons-for-block-editor

90+ Gutenberg Blocks & AI Website Builder with 1000+ Templates. Complete Page Builder, Popup Builder, Mega Menu, Form Builder & More. No Code.

10K 8 CVEs

Developer Profile

CM Blocks Developer Profile

CodeManas

15 plugins · 2K total installs

trust score

Avg Security Score

96/100

Avg Patch Time

9 days

View full developer profile

Detection Fingerprints

How We Detect CM Blocks

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/cm-blocks/build/admin/main.js/wp-content/plugins/cm-blocks/build/admin/style-main.css

Script Paths

/wp-content/plugins/cm-blocks/build/admin/main.js

Version Parameters

cm-blocks/build/admin/main.asset.phpcm-blocks/build/admin/style-main.css

HTML / DOM Fingerprints

CSS Classes

cm-blocks-admin-rootcodemanas-blocks

Data Attributes

data-wp-block="cm-blocks/slider"data-wp-block="cm-blocks/slide-item"data-wp-block="cm-blocks/accordion"data-wp-block="cm-blocks/accordion-item"

JS Globals

CMlicenseData

REST Endpoints

/wp-json/cm-blocks/v1/modules

FAQ