PLUGIN SECURITY
Is Bridge Core safe?
Editor Bridge plugin expands the functionality of core blocks and adds styles and formats.
What this plugin does
- Slug:
bridge-core - Author: thingsym
- 200+ active installs
- 100/100 rating (1 review on wordpress.org)
- 4898 all-time downloads
- On WordPress.org since 2020-10-24
blockblock-editorgutenberg
Maintenance status
- Last updated: 2026-06-18 7:46am GMT
- Tested up to WordPress: 7.0.4
- Requires PHP: 7.4+
Known vulnerabilities
5 known CVEs on file for Bridge Core. Reported between 2023 and 2025.
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2025-31409 | Bridge Core [bridge-core] < 3.3.1 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.5 | < 3.3.1 | 3.3.1 | 2025-03-31 | — |
| CVE-2025-24744 | Bridge Core [bridge-core] < 3.3.1 | Missing Authorization | Medium 4.3 | < 3.3.1 | 3.3.1 | 2025-01-24 | — |
| CVE-2024-9860 | Bridge Core [bridge-core] < 3.3.1 | Missing Authorization | Medium 6.5 | < 3.3.1 | 3.3.1 | 2024-10-11 | — |
| CVE-2024-9292 | Bridge Core [bridge-core] < 3.3 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Medium 6.4 | < 3.3 | 3.3 | 2024-10-07 | — |
| CVE-2023-40333 | Bridge Core [bridge-core] < 3.1.0 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | High 7.1 | < 3.1.0 | 3.1.0 | 2023-08-29 | — |
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Safer / more established alternatives
- Classic Editor — 8000000+ active installs — 98/100 (1246) — max PHP 8.4
- Advanced Editor Tools — 1000000+ active installs — 90/100 (354) — max PHP 8.4
- Starter Templates – AI-Powered Templates for Elementor & Gutenberg — 1000000+ active installs — 98/100 (4745) — max PHP 8.4
- Disable Gutenberg — 500000+ active installs — 100/100 (733) — max PHP 8.4
- Shortcodes Ultimate – Content Elements — 400000+ active installs — 98/100 (5924) — max PHP 8.4
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.