Essential Blocks vulnerabilities
We track 1 vulnerability in Essential Blocks products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 15, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Essential Blocks vulnerabilities
- 9.8 Critical severity
Essential Blocks: Improper Limitation of a Pathname to a Restricted Directory
The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks.