Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns

Уязвимости

• CVE-2023-4402без авторизации≤ 1.1.0

  Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

  Критич. 9.8

• CVE-2025-26871нужен вход≤ 4.8.3

  WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-51360подписчик+≤ 4.2.0

  WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-47760нужен вход≤ 4.2.0

  WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2024-30467нужен вход≤ 4.4.9

  WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-51359участник+≤ 4.2.0

  WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability

  Высокий 8.8

• CVE-2023-4386без авторизации≤ 1.1.0

  Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

  Высокий 8.1

• CVE-2026-10586автор+≤ 6.1.3

  Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery

  Высокий 7.2

• CVE-2022-47594без авторизации≤ 3.8.5

  WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control

  Средний 6.5

• CVE-2026-96256участник+≤ 6.4.5

  Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute

  Средний 6.4

• CVE-2026-10833участник+≤ 6.1.4

  Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurableP

  Средний 6.4

• CVE-2026-4658участник+≤ 6.0.4

  Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes

  Средний 6.4

• CVE-2025-11270участник+≤ 5.7.1

  Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2025-11361автор+≤ 5.7.1

  Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery

  Средний 6.4

• CVE-2025-4682участник+≤ 5.4.0

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post C

  Средний 6.4

• CVE-2024-47385нужен вход≤ 4.8.4

  WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2024-31306нужен вход≤ 4.5.3

  WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

  Средний 5.4

• CVE-2025-1664участник+≤ 5.3.1

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-4891участник+≤ 4.5.12

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-3818участник+≤ 4.5.9

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons"

  Средний 5.4

• CVE-2024-2255участник+≤ 4.5.3

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-1854участник+≤ 4.5.1

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2023-7071участник+≤ 4.4.6

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

  Средний 5.4

• CVE-2024-12045админ≤ 5.1.0

  Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting

  Средний 4.8

• CVE-2023-2087без авторизации · нужен клик≤ 4.0.6

  Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save

  Средний 4.3

• CVE-2023-2086нужен вход≤ 4.0.6

  Essential Blocks <= 4.0.6 - Missing Authorization via template_count

  Средний 4.3

• CVE-2023-2085нужен вход≤ 4.0.6

  Essential Blocks <= 4.0.6 - Missing Authorization via templates

  Средний 4.3

• CVE-2023-2084нужен вход≤ 4.0.6

  Essential Blocks <= 4.0.6 - Missing Authorization via get

  Средний 4.3

• CVE-2023-2083нужен вход≤ 4.0.6

  Essential Blocks <= 4.0.6 - Missing Authorization via save

  Средний 4.3

• CVE-2025-11369автор+≤ 5.7.2

  Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure

  Средний 4.3