Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns

Уязвимости

• CVE-2023-4402

  Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

  Критич. 9.8

• CVE-2025-26871

  WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-51360

  WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-51359

  WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-47760

  WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2024-30467

  WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-4386

  Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

  Высокий 8.1

• CVE-2026-10586

  Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery

  Высокий 7.2

• CVE-2022-47594

  WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control

  Средний 6.5

• CVE-2026-96256

  Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute

  Средний 6.4

• CVE-2026-10833

  Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurableP

  Средний 6.4

• CVE-2026-4658

  Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes

  Средний 6.4

• CVE-2025-11270

  Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2025-11361

  Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery

  Средний 6.4

• CVE-2025-4682

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post C

  Средний 6.4

• CVE-2025-1664

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-47385

  WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-4891

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-3818

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons"

  Средний 5.4

• CVE-2024-31306

  WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-2255

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-1854

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2023-7071

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-12045

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting

  Средний 4.8

• CVE-2025-11369

  Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure

  Средний 4.3

• CVE-2023-2087

  Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save

  Средний 4.3

• CVE-2023-2086

  Essential Blocks <= 4.0.6 - Missing Authorization via template_count

  Средний 4.3

• CVE-2023-2085

  Essential Blocks <= 4.0.6 - Missing Authorization via templates

  Средний 4.3

• CVE-2023-2084

  Essential Blocks <= 4.0.6 - Missing Authorization via get

  Средний 4.3

• CVE-2023-2083

  Essential Blocks <= 4.0.6 - Missing Authorization via save

  Средний 4.3