WPDeveloper / Essential Blocks
25 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-1664 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 6.4 | Mar 8, 2025 |
| CVE-2024-13803 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 6.4 | Feb 26, 2025 |
| CVE-2025-26871 | WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability | HIGH | 8.8 | Feb 25, 2025 |
| CVE-2024-12045 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting | MEDIUM | 4.8 | Jan 8, 2025 |
| CVE-2022-47594 | WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control | MEDIUM | 6.5 | Dec 13, 2024 |
| CVE-2023-47760 | WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability | HIGH | 8.8 | Dec 9, 2024 |
| CVE-2023-51360 | WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability | HIGH | 8.8 | Dec 9, 2024 |
| CVE-2023-51359 | WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability | HIGH | 8.8 | Dec 9, 2024 |
| CVE-2024-47385 | WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 6.5 | Oct 5, 2024 |
| CVE-2024-5595 | Essential Blocks < 4.7.0 - Contributor+ Stored XSS | MEDIUM | 5.4 | Aug 2, 2024 |
| CVE-2024-30467 | WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability | HIGH | 8.8 | Jun 9, 2024 |
| CVE-2024-4891 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 6.4 | May 18, 2024 |
| CVE-2024-3818 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons… | MEDIUM | 5.4 | Apr 19, 2024 |
| CVE-2024-31306 | WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 6.5 | Apr 7, 2024 |
| CVE-2024-2255 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 6.4 | Mar 20, 2024 |
| CVE-2024-1854 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 6.4 | Mar 13, 2024 |
| CVE-2023-6623 | Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion | CRITICAL | 9.8 | Jan 15, 2024 |
| CVE-2023-7071 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 6.4 | Jan 11, 2024 |
| CVE-2023-4386 | Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries | HIGH | 8.1 | Oct 20, 2023 |
| CVE-2023-4402 | Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products | CRITICAL | 9.8 | Oct 20, 2023 |
| CVE-2023-2083 | Essential Blocks <= 4.0.6 - Missing Authorization via save | MEDIUM | 4.3 | Jun 9, 2023 |
| CVE-2023-2087 | Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save | MEDIUM | 4.3 | Jun 9, 2023 |
| CVE-2023-2085 | Essential Blocks <= 4.0.6 - Missing Authorization via templates | MEDIUM | 4.3 | Jun 9, 2023 |
| CVE-2023-2086 | Essential Blocks <= 4.0.6 - Missing Authorization via template_count | MEDIUM | 4.3 | Jun 9, 2023 |
| CVE-2023-2084 | Essential Blocks <= 4.0.6 - Missing Authorization via get | MEDIUM | 4.3 | Jun 9, 2023 |
Showing 1 to 25 of 25 CVEs