浏览 29+ 条来自 NVD 与 CNNVD 的 CVE 漏洞,配 AI 中文翻译、AI POC 生成、每日情报;可按厂商、产品、严重等级、CWE 检索。
| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2025-11369 | Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 4.3 | 2025-12-17 01:48:52 | Deep Dive |
| CVE-2025-11270 | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 6.4 | 2025-10-18 06:42:48 | Deep Dive |
| CVE-2025-11361 | Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 6.4 | 2025-10-18 04:25:57 | Deep Dive |
| CVE-2025-4682 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 6.4 | 2025-05-27 01:48:49 | Deep Dive |
| CVE-2025-1664 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 6.4 | 2025-03-08 11:16:40 | Deep Dive |
| CVE-2024-13803 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 6.4 | 2025-02-26 07:01:19 | Deep Dive |
| CVE-2025-26871 | WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability | WPDeveloper | Essential Blocks for Gutenberg | Medium | 4.3 | 2025-02-25 14:17:51 | Deep Dive |
| CVE-2024-12045 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 4.4 | 2025-01-08 07:18:38 | Deep Dive |
| CVE-2022-47594 | WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control | WPDeveloper | Essential Blocks for Gutenberg | Medium | 6.5 | 2024-12-13 14:22:12 | Deep Dive |
| CVE-2023-47760 | WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability | WPDeveloper | Essential Blocks for Gutenberg | 中危 | - | 2024-12-09 11:30:52 | Deep Dive |
| CVE-2023-51360 | WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability | WPDeveloper | Essential Blocks for Gutenberg | 中危 | - | 2024-12-09 11:29:49 | Deep Dive |
| CVE-2023-51359 | WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability | WPDeveloper | Essential Blocks for Gutenberg | 中危 | - | 2024-12-09 11:29:48 | Deep Dive |
| CVE-2024-47385 | WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability | WPDeveloper | Essential Blocks for Gutenberg | Medium | 6.5 | 2024-10-05 14:51:56 | Deep Dive |
| CVE-2024-5595 | Essential Blocks < 4.7.0 - Contributor+ Stored XSS | Unknown | Essential Blocks | - | - | 2024-08-02 06:00:07 | Deep Dive |
| CVE-2024-30467 | WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability | WPDeveloper | Essential Blocks for Gutenberg | Medium | 6.5 | 2024-06-09 10:49:07 | Deep Dive |
| CVE-2024-4891 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 6.4 | 2024-05-18 04:30:53 | Deep Dive |
| CVE-2024-3818 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 5.4 | 2024-04-19 02:34:43 | Deep Dive |
| CVE-2024-31306 | WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability | WPDeveloper | Essential Blocks for Gutenberg | Medium | 6.5 | 2024-04-07 17:42:54 | Deep Dive |
| CVE-2024-2255 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 6.4 | 2024-03-20 03:20:33 | Deep Dive |
| CVE-2024-1854 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting | wpdevteam | Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns | Medium | 6.4 | 2024-03-13 15:27:03 | Deep Dive |