wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns

• CVE-2026-96256 Medium 6.4 Gutenberg Essential Blocks <= 6.4.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'marker' Attribute 0.3%
• CVE-2026-10833 Medium 6.4 Gutenberg Essential Blocks - Page Builder for Gutenberg Blocks & Patterns <= 6.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'configurablePrefix' Block Attribute 0.3%
• CVE-2026-10586 High 7.2 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 6.1.3 - Authenticated (Author+) Server-Side Request Forgery 0.3%
• CVE-2026-4658 Medium 6.4 Gutenberg Essential Blocks <= 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Attributes 0.4%
• CVE-2025-11369 Medium 4.3 Essential Blocks <= 5.7.2 - Missing Authorization To Authenticated (Author+) Information Disclosure 0.3%
• CVE-2025-11270 Medium 6.4 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns <= 5.7.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
• CVE-2025-11361 Medium 6.4 Essential Blocks <= 5.7.1 - Authenticated (Author+) Server-Side Request Forgery 0.3%
• CVE-2025-4682 Medium 6.4 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets 0.4%
• CVE-2025-1664 Medium 6.4 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.2%
• CVE-2024-13803 Medium 6.4 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.5%
• CVE-2024-12045 Medium 4.4 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting 0.2%
• CVE-2024-4891 Medium 6.4 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.5%
• CVE-2024-3818 Medium 5.4 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block 0.3%
• CVE-2024-2255 Medium 6.4 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.6%
• CVE-2024-1854 Medium 6.4 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2023-7071 Medium 6.4 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.4%
• CVE-2023-4386 High 8.1 Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries 0.9%
• CVE-2023-4402 High 8.1 Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products 1.5%
• CVE-2023-2083 Medium 4.3 Essential Blocks <= 4.0.6 - Missing Authorization via save 0.6%
• CVE-2023-2087 Medium 4.3 Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save 0.3%
• CVE-2023-2085 Medium 4.3 Essential Blocks <= 4.0.6 - Missing Authorization via templates 0.6%
• CVE-2023-2086 Medium 4.3 Essential Blocks <= 4.0.6 - Missing Authorization via template_count 0.6%
• CVE-2023-2084 Medium 4.3 Essential Blocks <= 4.0.6 - Missing Authorization via get 0.5%