Advisories · Technology
wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns.
Every CVE that names wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.4 Medium
Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 7.2 High
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Broken access control
- CVSS 6.4 Medium
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- CWE-20
- CVSS 6.4 Medium
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site scripting (XSS)
- CVSS 8.1 High
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
- wpdevteam Essential Blocks Pro
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Insecure deserialization
- CVSS 8.1 High
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products
- wpdevteam Essential Blocks Pro
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Insecure deserialization
- CVSS 4.3 Medium
Essential Blocks <= 4.0.6 - Missing Authorization via save
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Broken access control
- CVSS 4.3 Medium
Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
Essential Blocks <= 4.0.6 - Missing Authorization via templates
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Broken access control
- CVSS 4.3 Medium
Essential Blocks <= 4.0.6 - Missing Authorization via template_count
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Broken access control
- CVSS 4.3 Medium
Essential Blocks <= 4.0.6 - Missing Authorization via get
- wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
- Broken access control