Essential Blocks for Gutenberg
WPDeveloper
Developer
6.5.2
Latest version
100,000
Installations
No date
Last updated
Vulnerability history
0 present
30 patched
8 Mitigation rules
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 6.4.530/09/2026
- Unauthenticated WooCommerce Sales Data Disclosure via REST products Endpoint vulnerability< 6.4.020/08/2026
- Unauthenticated Non-Public Custom Post Type Content Disclosure via queries Endpoint vulnerability< 6.4.020/08/2026
- Page Builder for Gutenberg Blocks & Patterns plugin <= 6.1.4 - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 6.1.424/06/2026
- WordPress Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns plugin <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery vulnerability<= 6.1.305/06/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 6.0.401/05/2026
- Unauthenticated Local File Inclusion vulnerability< 4.4.306/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 4.5.302/02/2026
- Missing Authorization To Authenticated (Author+) Information Disclosure vulnerability<= 5.7.216/12/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.7.118/10/2025
- Authenticated (Author+) Server-Side Request Forgery vulnerability<= 5.7.118/10/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets vulnerability<= 5.4.027/05/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.3.108/03/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 5.2.325/02/2025
- Broken Access Control vulnerability<= 4.8.322/02/2025
- Authenticated (Admin+) Stored Cross-Site Scripting vulnerability<= 5.1.007/01/2025
- Cross Site Scripting (XSS) vulnerability<= 4.8.430/09/2024
- Contributor+ Stored XSS vulnerability< 4.7.002/08/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 4.5.1220/05/2024
- Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block vulnerability<= 4.5.919/04/2024
- Cross Site Scripting (XSS) vulnerability<= 4.5.305/04/2024
- Broken Access Control vulnerability<= 4.4.928/03/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 4.5.128/02/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 4.4.610/01/2024
- Multiple Subscriber+ Broken Access Control vulnerability<= 4.2.026/12/2023
- Multiple Contributor+ Broken Access Control vulnerability<= 4.2.026/12/2023
- Broken Access Control vulnerability<= 4.2.013/11/2023
- Unauthenticated PHP Object Injection vulnerability<= 4.2.014/09/2023
- Missing Authorization via get vulnerability<= 4.0.618/04/2023
- Broken Access Control<= 3.8.520/01/2023