CVE-2022-47594

The Essential Blocks for Gutenberg plugin contained improper capability verification in the EB_Openverse_Ajax class through version 3.8.5, allowing unauthenticated users to bypass authorization checks. An attacker could exploit this vulnerability by tricking an administrator into clicking a malicious link, enabling the attacker to register Openverse clients, upload images, and execute other Openverse operations. The flaw was patched in version 3.8.6.

Based on public CVE data (MITRE/NVD).