CVE Database /
CVE-2023-51360
CVE · Medium
CVE-2023-51360 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.2.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-51360
|
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.2.1 |
Missing Authorization |
Medium
6.5
|
< 4.2.1
|
4.2.1 |
2024-12-09 |
—
|
CVE-2023-51360
The Essential Blocks plugin for WordPress contained a broken access control flaw in versions before 4.2.1 that allowed unauthenticated or lower-privileged users to perform actions normally restricted to higher-privileged roles due to missing authorization checks and nonce verification. The vulnerability was discovered by Rafie Muhammad and reported through Patchstack. Users should upgrade to version 4.2.1 or later to remediate this issue.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings