Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns — Vulnerabilities & Security Advisories 20

All 20 CVE vulnerabilities found in Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns, with AI-generated Chinese analysis, references, and POCs.

This page details security vulnerabilities affecting the Gutenberg Essential Blocks plugin, a popular page builder for WordPress Gutenberg Blocks and Patterns, categorized under common weakness enumeration tags for web applications. The content herein aggregates data regarding security flaws identified in this specific software product, focusing on issues that may impact data integrity, confidentiality, or availability. The information covers a broad time range, encompassing historical advisories from initial release phases through to recent updates, ensuring a comprehensive view of the plugin's security posture over time. Visitors to this page can discover actionable insights by tracking vendor advisories associated with Gutenberg Essential Blocks to stay informed about critical patches and remediation steps. Furthermore, users can understand broader weakness classes by examining how specific coding errors or design flaws manifest within this ecosystem, providing context for common security anti-patterns. The page also allows you to look up the product's vulnerability history, offering a chronological record of past issues, their resolution status, and any recurring themes in reported bugs. This resource is intended for developers, security researchers, and site administrators seeking to assess risk and maintain robust security practices. By consolidating these details, the page serves as a reference point for evaluating the trustworthiness of the Gutenberg Essential Blocks plugin and understanding the landscape of threats it faces. All data is presented objectively to facilitate informed decision-making regarding installation, configuration, and ongoing maintenance of the software in production environments.

Vendor: wpdevteam

CVE IDTitleCVSSSeverityPublished
CVE-2026-10833 Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute CWE-79 6.4 Medium2026-06-25
CVE-2026-10586 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery CWE-918 7.2 High2026-06-04
CVE-2026-4658 Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes CWE-79 6.4 Medium2026-05-02
CVE-2025-11369 Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure CWE-862 4.3 Medium2025-12-17
CVE-2025-11270 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-10-18
CVE-2025-11361 Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery CWE-918 6.4 Medium2025-10-18
CVE-2025-4682 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets CWE-79 6.4 Medium2025-05-27
CVE-2025-1664 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-03-08
CVE-2024-13803 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2025-02-26
CVE-2024-12045 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting CWE-79 4.4 Medium2025-01-08
CVE-2024-4891 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-05-18
CVE-2024-3818 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block CWE-79 5.4 Medium2024-04-19
CVE-2024-2255 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-03-20
CVE-2024-1854 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-20 6.4 Medium2024-03-13
CVE-2023-7071 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79 6.4 Medium2024-01-11
CVE-2023-2083 Essential Blocks <= 4.0.6 - Missing Authorization via save CWE-862 4.3 Medium2023-06-09
CVE-2023-2087 Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save CWE-352 4.3 Medium2023-06-09
CVE-2023-2085 Essential Blocks <= 4.0.6 - Missing Authorization via templates CWE-862 4.3 Medium2023-06-09
CVE-2023-2086 Essential Blocks <= 4.0.6 - Missing Authorization via template_count CWE-862 4.3 Medium2023-06-09
CVE-2023-2084 Essential Blocks <= 4.0.6 - Missing Authorization via get CWE-862 4.3 Medium2023-06-09

All 20 known CVE vulnerabilities affecting Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns with full Chinese analysis, references, and POCs where available.