WPDeveloper Vulnerabilities and Affected Products
Vulnerabilities associated with Essential Blocks for Gutenberg.
Products
Clear product- Essential Addons for Elementor11 vulnerabilities
- EmbedPress9 vulnerabilities
- Essential Blocks for Gutenberg8 vulnerabilities
- BetterDocs6 vulnerabilities
- essential_addons_for_elementor5 vulnerabilities
- Templately5 vulnerabilities
- NotificationX3 vulnerabilities
- BetterLinks2 vulnerabilities
- Essential Addons for Elementor Pro2 vulnerabilities
- essential_blocks2 vulnerabilities
- SchedulePress2 vulnerabilities
- Typing Text2 vulnerabilities
- Better Payment – Instant Payments, Donations, Fundraising with Subscriptions & More1 vulnerability
- Document Block – Upload & Embed Docs1 vulnerability
- Essential Addons for Elementor plugin for WordPress1 vulnerability
- Parallax Slider Block1 vulnerability
- ReviewX – Multi-criteria Rating & Reviews for WooCommerce1 vulnerability
- Secret Meta1 vulnerability
- Simple 301 Redirects by BetterLinks1 vulnerability
- simple_301_redirects1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2025-26871MEDIUM | WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerabilityMissing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.3. CWE-862Feb 25, 2025 | CVSS4.3v3.1 | EPSS0.391% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-47594MEDIUM | WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access ControlMissing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 3.8.5. CWE-862Dec 13, 2024 | CVSS6.5v3.1 | EPSS0.419% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-47760MEDIUM | WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerabilityMissing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0. CWE-862Dec 9, 2024 | CVSS4.3v3.1 | EPSS0.393% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-51360MEDIUM | WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerabilityMissing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0. CWE-862Dec 9, 2024 | CVSS6.5v3.1 | EPSS0.573% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-51359MEDIUM | WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerabilityMissing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0. CWE-862Dec 9, 2024 | CVSS5.4v3.1 | EPSS0.575% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-47385MEDIUM | WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.4. CWE-79Oct 5, 2024 | CVSS6.5v3.1 | EPSS0.248% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-30467MEDIUM | WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerabilityMissing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg.This issue affects Essential Blocks for Gutenberg: from n/a through 4.4.9. CWE-862Jun 9, 2024 | CVSS6.5v3.1 | EPSS0.409% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-31306MEDIUM | WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through 4.5.3. CWE-79Apr 7, 2024 | CVSS6.5v3.1 | EPSS0.385% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |