Unknown Gutenberg Essential Blocks

• CVE-2026-13154 High 7.5 Essential Blocks < 6.4.0 - Unauthenticated Non-Public Custom Post Type Content Disclosure via queries Endpoint 0.4%
• CVE-2026-13153 High 7.5 Essential Blocks < 6.4.0 - Unauthenticated WooCommerce Sales Data Disclosure via REST products Endpoint 1.5%