Essential Blocks vulnerabilities

7 known vulnerabilities in Essential Blocks from Wpdeveloper. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Essential Blocks for Gutenberg: Missing Authorization

  CVE-2025-26871Feb 25, 2025Wpdeveloper

  Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.3.

• 8.8 High severity

  Essential Blocks for Gutenberg: Missing Authorization

  CVE-2023-51360Dec 9, 2024Wpdeveloper

  Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.

• 8.8 High severity

  Essential Blocks for Gutenberg: Missing Authorization

  CVE-2023-51359Dec 9, 2024Wpdeveloper

  Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.

• 8.8 High severity

  Essential Blocks for Gutenberg: Missing Authorization

  CVE-2023-47760Dec 9, 2024Wpdeveloper

  Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.

• 8.8 High severity

  Essential Blocks for Gutenberg: Missing Authorization

  CVE-2024-30467Jun 9, 2024Wpdeveloper

  Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg.This issue affects Essential Blocks for Gutenberg: from n/a through 4.4.9.

• 8.1 High severity

  Essential Blocks Pro: Deserialization of Untrusted Data

  CVE-2023-4386Oct 20, 2023Wpdevteam

  The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_posts function. This allows unauthenticated attackers to inject a PHP Object. No POP chain

• 9.8 Critical severity

  Essential Blocks Pro: Deserialization of Untrusted Data

  CVE-2023-4402Oct 20, 2023WpdevteamEPSS 1.46%

  The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_products function. This allows unauthenticated attackers to inject a PHP Object. No POP ch