Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses for Gutenberg Essential Blocks, a page builder extension designed for the WordPress Gutenberg block editor and pattern library. It collects a mix of vulnerability types, primarily cross-site scripting, arbitrary file upload flaws, and privilege escalation bugs reported against this product. The data spans advisories issued over the past five years, covering both high-severity issues and lower-impact hardening updates. Readers can track the vendor's security advisories, understand the recurring weakness classes affecting the plugin, and review the product's complete vulnerability history. The interface supports filtering by vulnerability type, severity, and discovery date. Each entry links to the original advisory source and includes details on affected versions and recommended patches. This aggregation allows security teams and developers to quickly identify exposure risks associated with the plugin, verify patch status, and assess whether their current installation requires immediate action.

Vendor: wpdevteam

CVE ID Title CVSS Severity Published
CVE-2026-96256 Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute CWE-79 6.4 Medium 2026-10-01
CVE-2026-10833 Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute CWE-79 6.4 Medium 2026-06-25
CVE-2026-10586 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery CWE-918 7.2 High 2026-06-04
CVE-2026-4658 Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes CWE-79 6.4 Medium 2026-05-02
CVE-2025-11369 Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure CWE-862 4.3 Medium 2025-12-17
CVE-2025-11270 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2025-10-18
CVE-2025-11361 Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery CWE-918 6.4 Medium 2025-10-18
CVE-2025-4682 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets CWE-79 6.4 Medium 2025-05-27
CVE-2025-1664 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2025-03-08
CVE-2024-13803 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2025-02-26
CVE-2024-12045 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting CWE-79 4.4 Medium 2025-01-08
CVE-2024-4891 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-05-18
CVE-2024-3818 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block CWE-79 5.4 Medium 2024-04-19
CVE-2024-2255 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-03-20
CVE-2024-1854 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-20 6.4 Medium 2024-03-13
CVE-2023-7071 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium 2024-01-11
CVE-2023-2083 Essential Blocks <= 4.0.6 - Missing Authorization via save CWE-862 4.3 Medium 2023-06-09
CVE-2023-2087 Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save CWE-352 4.3 Medium 2023-06-09
CVE-2023-2085 Essential Blocks <= 4.0.6 - Missing Authorization via templates CWE-862 4.3 Medium 2023-06-09
CVE-2023-2086 Essential Blocks <= 4.0.6 - Missing Authorization via template_count CWE-862 4.3 Medium 2023-06-09
CVE-2023-2084 Essential Blocks <= 4.0.6 - Missing Authorization via get CWE-862 4.3 Medium 2023-06-09

All 21 known CVE vulnerabilities affecting Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns with full Chinese analysis, references, and POCs where available.