VendorsWPDeveloperessential_blocksall versions

Vulnerabilities

WPDeveloper Essential Blocks

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

25CVEs

CVE-2023-6623

Essential Blocks < 4.4.3 - Unauthenticated Local File Inclusion

Published 2024-01-15 · Modified

9.8EPSS 0.507

CVE-2023-4402

Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

Published 2023-10-20 · Modified

9.8EPSS 0.015

CVE-2023-51359

WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability

Published 2024-12-09 · Modified

8.8EPSS 0.006

CVE-2023-51360

WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability

Published 2024-12-09 · Modified

8.8EPSS 0.006

CVE-2024-30467

WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability

Published 2024-06-09 · Modified

8.8EPSS 0.004

CVE-2025-26871

WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability

Published 2025-02-25 · Modified

8.8EPSS 0.004

CVE-2023-47760

WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability

Published 2024-12-09 · Modified

8.8EPSS 0.004

CVE-2023-4386

Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

Published 2023-10-20 · Modified

8.1EPSS 0.009

CVE-2022-47594

WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control

Published 2024-12-13 · Modified

6.5EPSS 0.004

CVE-2024-31306

WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability

Published 2024-04-07 · Modified

6.5EPSS 0.004

CVE-2024-47385

WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability

Published 2024-10-05 · Modified

6.5EPSS 0.003

CVE-2024-2255

Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-03-20 · Modified

6.4EPSS 0.006

CVE-2024-13803

Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2025-02-26 · Analyzed

6.4EPSS 0.005

CVE-2024-4891

Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-05-18 · Modified

6.4EPSS 0.005

CVE-2024-1854

Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-03-13 · Modified

6.4EPSS 0.004

CVE-2023-7071

Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2024-01-11 · Modified

6.4EPSS 0.004

CVE-2025-1664

Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Published 2025-03-08 · Analyzed

6.4EPSS 0.002

CVE-2024-5595

Essential Blocks < 4.7.0 - Contributor+ Stored XSS

Published 2024-08-02 · Analyzed

5.4EPSS 0.004

CVE-2024-3818

Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block

Published 2024-04-19 · Modified

5.4EPSS 0.003

CVE-2024-12045

Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting

Published 2025-01-08 · Analyzed

4.8EPSS 0.002

CVE-2023-2085

Essential Blocks <= 4.0.6 - Missing Authorization via templates