Product by WPDeveloper

    Gutenberg Essential Blocks

    25 known vulnerabilities in Gutenberg Essential Blocks (WPDeveloper), 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Gutenberg Essential Blocks (WPDeveloper)
    CriticalCVE-2023-6623

    Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion

    		9.8
    CriticalCVE-2023-4402

    Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

    also in 1 other product

    		8.1
    HighCVE-2023-4386

    Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

    also in 1 other product

    		8.1
    HighCVE-2023-51360

    WPDeveloper Essential Blocks for Gutenberg: Missing Authorization

    also in 1 other product

    		6.5
    MediumCVE-2024-2255

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-13803

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		6.4
    HighCVE-2023-51359

    WPDeveloper Essential Blocks for Gutenberg: Missing Authorization

    also in 1 other product

    		5.4
    MediumCVE-2022-47594

    WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control

    also in 1 other product

    		6.5
    MediumCVE-2024-4891

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		6.4
    HighCVE-2024-30467

    WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-1854

    Essential Blocks: Improper Input Validation

    also in 1 other product

    		6.4
    MediumCVE-2023-7071

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-31306

    WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2024-5595

    Essential Blocks < 4.7.0 - Contributor+ Stored XSS

    		5.4
    MediumCVE-2023-2085

    Essential Blocks <= 4.0.6 - Missing Authorization via templates

    also in 1 other product

    		4.3
    MediumCVE-2023-2086

    Essential Blocks <= 4.0.6 - Missing Authorization via template_count

    also in 1 other product

    		4.3
    MediumCVE-2023-2083

    Essential Blocks <= 4.0.6 - Missing Authorization via save

    also in 1 other product

    		4.3
    MediumCVE-2024-47385

    WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability

    also in 1 other product

    		6.5
    MediumCVE-2025-1664

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-2084

    Essential Blocks <= 4.0.6 - Missing Authorization via get

    also in 1 other product

    		4.3
    HighCVE-2025-26871

    WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability

    also in 1 other product

    		4.3
    MediumCVE-2024-3818

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		5.4
    HighCVE-2023-47760

    WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability

    also in 1 other product

    		4.3
    MediumCVE-2024-12045

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2023-2087

    Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save

    also in 1 other product

    		4.3

    All products by WPDeveloper