wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns vulnerabilities

33 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 16 published in the last 12 months.

Check whether your wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns version is affected

Latest wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns vulnerabilities

CVE-2026-96256 — Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute (CVSS 6.4)
CVE-2026-10833 — Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute (CVSS 6.4)
CVE-2026-10586 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery (CVSS 7.2)
CVE-2026-4658 — Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes (CVSS 6.4)
CVE-2025-11369 — Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure (CVSS 4.3)
CVE-2025-11270 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
CVE-2025-11361 — Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery (CVSS 6.4)
CVE-2025-4682 — Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets (CVSS 6.4)
CVE-2025-1664 — Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2024-13803 — Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2025-26871 — WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability (CVSS 8.8)
CVE-2024-12045 — Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting (CVSS 4.8)
CVE-2022-47594 — WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control (CVSS 6.5)
CVE-2023-51360 — WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability (CVSS 8.8)
CVE-2023-51359 — WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability (CVSS 8.8)
CVE-2023-47760 — WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability (CVSS 8.8)
CVE-2024-47385 — WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-5595 — Essential Blocks < 4.7.0 - Contributor+ Stored XSS (CVSS 5.4)
CVE-2024-30467 — WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability (CVSS 8.8)
CVE-2024-4891 — Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2024-3818 — Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block (CVSS 5.4)
CVE-2024-31306 — WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2024-2255 — Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2024-1854 — Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
CVE-2023-6623 — Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion (CVSS 9.8)