Product by Wpdevteam

    Gutenberg Essential Blocks – Page Builder For Gutenberg Blocks & Patterns

    23 known vulnerabilities in Gutenberg Essential Blocks – Page Builder For Gutenberg Blocks & Patterns (Wpdevteam), 0 of them actively exploited (CISA KEV).

    Key figures

    23

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Gutenberg Essential Blocks – Page Builder For Gutenberg Blocks & Patterns (Wpdevteam)
    CriticalCVE-2023-4402

    Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

    also in 1 other product

    		8.1
    HighCVE-2023-4386

    Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

    also in 1 other product

    		8.1
    MediumCVE-2026-96256

    Cross-site Scripting (CVE-2026-96256)

    		6.4
    MediumCVE-2026-4658

    Cross-site Scripting (CVE-2026-4658)

    		6.4
    HighCVE-2026-10586

    Server-Side Request Forgery (SSRF) (CVE-2026-10586)

    		7.2
    MediumCVE-2026-10833

    Cross-site Scripting (CVE-2026-10833)

    		6.4
    MediumCVE-2024-2255

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-13803

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2024-4891

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2025-4682

    Cross-site Scripting (CVE-2025-4682)

    		6.4
    MediumCVE-2025-11361

    Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery

    		6.4
    MediumCVE-2024-1854

    Essential Blocks: Improper Input Validation

    also in 1 other product

    		6.4
    MediumCVE-2023-7071

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2025-11270

    Cross-site Scripting (CVE-2025-11270)

    		6.4
    MediumCVE-2023-2085

    Essential Blocks <= 4.0.6 - Missing Authorization via templates

    also in 1 other product

    		4.3
    MediumCVE-2023-2086

    Essential Blocks <= 4.0.6 - Missing Authorization via template_count

    also in 1 other product

    		4.3
    MediumCVE-2023-2083

    Essential Blocks <= 4.0.6 - Missing Authorization via save

    also in 1 other product

    		4.3
    MediumCVE-2025-1664

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		6.4
    MediumCVE-2023-2084

    Essential Blocks <= 4.0.6 - Missing Authorization via get

    also in 1 other product

    		4.3
    MediumCVE-2025-11369

    Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure

    		4.3
    MediumCVE-2024-3818

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		5.4
    MediumCVE-2024-12045

    Essential Blocks: Cross-site Scripting

    also in 1 other product

    		4.4
    MediumCVE-2023-2087

    Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save

    also in 1 other product

    		4.3

    All products by Wpdevteam