GE
Product
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns
23
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 2Medium 20Low 0
Watch
Add Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4402 | 9.8 | Oct 20 | Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products Affected: through 4.2.0 |
| CVE-2023-4386 | 8.1 | Oct 20 | Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries Affected: through 4.2.0 |
| CVE-2026-10586 | 7.2 | Jun 4 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery Affected: through 6.1.3 |
| CVE-2026-96256 | 6.4 | Oct 1 | Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute Affected: through 6.4.5 |
| CVE-2026-10833 | 6.4 | Jun 25 | Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute Affected: through 6.1.4 |
| CVE-2026-4658 | 6.4 | May 2 | Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes Affected: through 6.0.4 |
| CVE-2025-11270 | 6.4 | Oct 18 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.7.1 |
| CVE-2025-11361 | 6.4 | Oct 18 | Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery Affected: through 5.7.1 |
| CVE-2025-4682 | 6.4 | May 27 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets Affected: through 5.4.0 |
| CVE-2025-1664 | 5.4 | Mar 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.3.1 |
| CVE-2024-13803 | 5.4 | Feb 26 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 5.2.3 |
| CVE-2024-4891 | 5.4 | May 18 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 4.5.12 |
| CVE-2024-3818 | 5.4 | Apr 19 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block Affected: through 4.5.9 |
| CVE-2024-2255 | 5.4 | Mar 20 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 4.5.3 |
| CVE-2024-1854 | 5.4 | Mar 13 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 4.5.1 |
| CVE-2023-7071 | 5.4 | Jan 11 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 4.4.6 |
| CVE-2024-12045 | 4.8 | Jan 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: through 5.1.0 |
| CVE-2025-11369 | 4.3 | Dec 17 | Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure Affected: through 5.7.2 |
| CVE-2023-2083 | 4.3 | Jun 9 | Essential Blocks <= 4.0.6 - Missing Authorization via save Affected: through 4.0.6 |
| CVE-2023-2087 | 4.3 | Jun 9 | Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save Affected: through 4.0.6 |
| CVE-2023-2085 | 4.3 | Jun 9 | Essential Blocks <= 4.0.6 - Missing Authorization via templates Affected: through 4.0.6 |
| CVE-2023-2086 | 4.3 | Jun 9 | Essential Blocks <= 4.0.6 - Missing Authorization via template_count Affected: through 4.0.6 |
| CVE-2023-2084 | 4.3 | Jun 9 | Essential Blocks <= 4.0.6 - Missing Authorization via get Affected: through 4.0.6 |
Showing 23