Skip to content
Noroxi

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns

essential-blocks · plugin

Known security vulnerabilities for Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns. Find out in seconds which version runs on your site with WP Lens.

30 known vulnerabilities

1 critical · latest Oct 1, 2026

Vulnerabilities

  • CVE-2023-4402

    Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

    Critical 9.8

  • CVE-2025-26871

    WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability

    High 8.8

  • CVE-2023-51360

    WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability

    High 8.8

  • CVE-2023-51359

    WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability

    High 8.8

  • CVE-2023-47760

    WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability

    High 8.8

  • CVE-2024-30467

    WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability

    High 8.8

  • CVE-2023-4386

    Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

    High 8.1

  • CVE-2026-10586

    Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery

    High 7.2

  • CVE-2022-47594

    WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control

    Medium 6.5

  • CVE-2026-96256

    Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute

    Medium 6.4

  • CVE-2026-10833

    Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurableP

    Medium 6.4

  • CVE-2026-4658

    Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes

    Medium 6.4

  • CVE-2025-11270

    Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 6.4

  • CVE-2025-11361

    Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery

    Medium 6.4

  • CVE-2025-4682

    Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post C

    Medium 6.4

  • CVE-2025-1664

    Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-47385

    WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-4891

    Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-3818

    Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons"

    Medium 5.4

  • CVE-2024-31306

    WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

    Medium 5.4

  • CVE-2024-2255

    Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-1854

    Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2023-7071

    Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

    Medium 5.4

  • CVE-2024-12045

    Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting

    Medium 4.8

  • CVE-2025-11369

    Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure

    Medium 4.3

  • CVE-2023-2087

    Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save

    Medium 4.3

  • CVE-2023-2086

    Essential Blocks <= 4.0.6 - Missing Authorization via template_count

    Medium 4.3

  • CVE-2023-2085

    Essential Blocks <= 4.0.6 - Missing Authorization via templates

    Medium 4.3

  • CVE-2023-2084

    Essential Blocks <= 4.0.6 - Missing Authorization via get

    Medium 4.3

  • CVE-2023-2083

    Essential Blocks <= 4.0.6 - Missing Authorization via save

    Medium 4.3

← Back to directory