Gutenberg Essential Blocks vulnerabilities
We track 2 vulnerabilities in Gutenberg Essential Blocks products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 6, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Gutenberg Essential Blocks vulnerabilities
- 7.5 High severity
Gutenberg Essential Blocks: Exposure of Sensitive Information to an Unauthorized Actor
The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not verify that an attacker-supplied post type is publicly viewable before querying it in one of its public REST routes, allowing unauthenticated users to read published entries of custom post t
- 7.5 High severity
Gutenberg Essential Blocks: Exposure of Sensitive Information to an Unauthorized Actor
The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not restrict access to one of its public REST routes and over-fetches a non-public WooCommerce per-product sales metric into the response, allowing unauthenticated users to read the lifetime num