Now officially on WordPress.org

CVE Database / CVE-2023-51360

CVE · Medium

CVE-2023-51360 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.2.1

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2023-51360 Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.2.1 Missing Authorization Medium 6.5 < 4.2.1 4.2.1 2024-12-09 —

CVE-2023-51360

Update the WordPress Essential Blocks for Gutenberg plugin to the latest available version (at least 4.2.1). Rafie Muhammad (Patchstack) discovered and reported this Broken Access Control vulnerability in WordPress Essential Blocks for Gutenberg Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has been fixed in version 4.2.1. Have additional information or questions about this entry? Get in touch.

Source: Patchstack

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)

See the full security page for this plugin Browse the CVE database Browse all security findings