PLUGIN SECURITY
Is Essential Blocks safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Essential Blocks WordPress plugin — checked against WP Clinic's local security database.
Plugin details
- Slug:
essential-blocks - Requires PHP: 7.4+
- Max supported PHP (analyzed): 8.4
Known vulnerabilities
- CVE-2022-47594 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 3.8.6 (Missing Authorization) · Medium
- CVE-2023-2085 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.0.7 (Missing Authorization) · Medium
- CVE-2023-2086 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.0.7 (Missing Authorization) · Medium
- CVE-2023-2087 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.0.7 (CSRF) · Medium
- CVE-2023-2084 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.0.7 (Missing Authorization) · Medium
+ 27 more known vulnerabilities
- CVE-2023-2083 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.0.7 (Missing Authorization) · Medium
- CVE-2023-4386 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.2.1 (Insecure Deserialization) · High
- CVE-2023-4402 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.2.1 (Insecure Deserialization) · Critical
- CVE-2023-47760 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.2.1 (Missing Authorization) · Medium
- CVE-2023-51359 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.2.1 (Missing Authorization) · Medium
- CVE-2023-51360 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.2.1 (Missing Authorization) · Medium
- CVE-2023-6623 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.4.3 (Path Traversal) · Critical
- CVE-2023-7071 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.4.7 (XSS) · Medium
- CVE-2024-1854 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.5.2 (CWE-20) · Medium
- CVE-2024-2255 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.5.4 (XSS) · Medium
- CVE-2024-30467 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.4.10 (Missing Authorization) · Medium
- CVE-2024-31306 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.5.4 (XSS) · Medium
- CVE-2024-3818 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.5.10 (XSS) · Medium
- CVE-2024-4891 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.5.13 (XSS) · Medium
- CVE-2024-5595 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.7.0 (XSS) · Medium
- CVE-2024-47385 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.9.0 (XSS) · Medium
- CVE-2024-12045 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.1.1 (XSS) · Medium
- CVE-2025-26871 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 4.8.4 (Missing Authorization) · Medium
- CVE-2024-13803 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.3.0 (XSS) · Medium
- CVE-2025-1664 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.3.2 (XSS) · Medium
- CVE-2025-4682 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.4.1 (XSS) · Medium
- CVE-2025-11270 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.7.2 (XSS) · Medium
- CVE-2025-11361 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.7.2 (SSRF) · Medium
- CVE-2025-11369 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 5.7.3 (Missing Authorization) · Medium
- CVE-2026-4658 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 6.1.0 (XSS) · Medium
- CVE-2026-10586 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 6.1.4 (SSRF) · High
- CVE-2026-10833 — Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns [essential-blocks] < 6.2.0 (XSS) · Medium
Vulnerabilities are matched against the exact installed version when it's known. Always keep the plugin updated to the latest release.
Safer / more established alternatives
- Classic Editor — 9000000+ active installs — max PHP 8.4
- Advanced Editor Tools — 1000000+ active installs — max PHP 8.4
- Starter Templates – AI-Powered Templates for Elementor & Gutenberg — 1000000+ active installs — max PHP 8.4
- Disable Gutenberg — 500000+ active installs — max PHP 8.4
- Shortcodes Ultimate – Content Elements — 400000+ active installs
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.