EB
Product
Essential Blocks
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 6Medium 17Low 0
Watch
Add Essential Blocks to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-47594 | 6.5 | Dec 13 | Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects… Affected: before 3.8.6 |
| CVE-2025-1664 | 5.4 | Mar 8 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Parallax slider in all… Affected: before 5.3.2 |
| CVE-2024-13803 | 5.4 | Feb 26 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-marker’ parameter in all… Affected: through 5.2.3 |
| CVE-2024-47385 | 5.4 | Oct 5 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Stored… Affected: before 4.9.0 |
| CVE-2024-5595 | 5.4 | Aug 2 | The Essential Blocks WordPress plugin before 4.7.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed,… Affected: before 4.7.0 |
| CVE-2024-4891 | 5.4 | May 18 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in… Affected: before 4.5.13 |
| CVE-2024-3818 | 5.4 | Apr 19 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's "Social Icons" block… Affected: before 4.5.10 |
| CVE-2024-31306 | 5.4 | Apr 7 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Stored XSS.This issue… Affected: before 4.5.4 |
| CVE-2024-2255 | 5.4 | Mar 20 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all… Affected: before 4.5.3 |
| CVE-2024-1854 | 5.4 | Mar 13 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId parameter in all… Affected: before 4.5.2 |
| CVE-2023-7071 | 5.4 | Jan 11 | The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Table of Contents block in all… Affected: through 4.4.6 |
| CVE-2024-12045 | 4.8 | Jan 8 | Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting Affected: through 5.0.9 |
| CVE-2023-2087 | 4.3 | Jun 9 | The Essential Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.6 Affected: through 4.0.6 |
| CVE-2023-2086 | 4.3 | Jun 9 | The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the template_count function in versions up to,… Affected: through 4.0.6 |
| CVE-2023-2085 | 4.3 | Jun 9 | The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the templates function in versions up to, and… Affected: through 4.0.6 |
| CVE-2023-2084 | 4.3 | Jun 9 | The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the get function in versions up to, and… Affected: through 4.0.6 |
| CVE-2023-2083 | 4.3 | Jun 9 | The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the save function in versions up to, and… Affected: through 4.0.6 |
Showing 17