EB
Product
Essential Blocks
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 17Low 0
Watch
Add Essential Blocks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-6623 | 9.8 | Jan 15 | Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion Affected: before 4.4.3 |
| CVE-2023-4402 | 9.8 | Oct 20 | Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products Affected: before 4.2.1 |
| CVE-2025-26871 | 8.8 | Feb 25 | WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability Affected: before 4.8.4 |
| CVE-2023-47760 | 8.8 | Dec 9 | WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability Affected: before 4.2.1 |
| CVE-2023-51360 | 8.8 | Dec 9 | WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability Affected: before 4.2.1 |
| CVE-2023-51359 | 8.8 | Dec 9 | WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability Affected: before 4.2.1 |
| CVE-2024-30467 | 8.8 | Jun 9 | WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability Affected: before 4.4.10 |
| CVE-2023-4386 | 8.1 | Oct 20 | Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries Affected: through 4.2.0 |
| CVE-2022-47594 | 6.5 | Dec 13 | WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control Affected: before 3.8.6 |
| CVE-2025-1664 | 5.4 | Mar 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 5.3.2 |
| CVE-2024-13803 | 5.4 | Feb 26 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.2.3 |
| CVE-2024-47385 | 5.4 | Oct 5 | WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability Affected: before 4.9.0 |
| CVE-2024-5595 | 5.4 | Aug 2 | Essential Blocks < 4.7.0 - Contributor+ Stored XSS Affected: before 4.7.0 |
| CVE-2024-4891 | 5.4 | May 18 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 4.5.13 |
| CVE-2024-3818 | 5.4 | Apr 19 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block Affected: before 4.5.10 |
| CVE-2024-31306 | 5.4 | Apr 7 | WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability Affected: before 4.5.4 |
| CVE-2024-2255 | 5.4 | Mar 20 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 4.5.3 |
| CVE-2024-1854 | 5.4 | Mar 13 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 4.5.2 |
| CVE-2023-7071 | 5.4 | Jan 11 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 4.4.6 |
| CVE-2024-12045 | 4.8 | Jan 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: through 5.0.9 |
| CVE-2023-2083 | 4.3 | Jun 9 | Essential Blocks <= 4.0.6 - Missing Authorization via save Affected: through 4.0.6 |
| CVE-2023-2087 | 4.3 | Jun 9 | Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save Affected: through 4.0.6 |
| CVE-2023-2085 | 4.3 | Jun 9 | Essential Blocks <= 4.0.6 - Missing Authorization via templates Affected: through 4.0.6 |
| CVE-2023-2086 | 4.3 | Jun 9 | Essential Blocks <= 4.0.6 - Missing Authorization via template_count Affected: through 4.0.6 |
| CVE-2023-2084 | 4.3 | Jun 9 | Essential Blocks <= 4.0.6 - Missing Authorization via get Affected: through 4.0.6 |
Showing 25