WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
essential-blocks
Published
2024-02-28
Title
Essential Blocks < 4.5.2 - Contributor+ Stored XSS
Slug
essential-blocks
Published
2024-03-19
Title
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates < 4.5.4 - Contributor+ Stored XSS
Slug
essential-blocks
Published
2024-03-28
Title
Essential Blocks for Gutenberg < 4.4.10 - Missing Authorization
Slug
essential-blocks
Published
2024-04-05
Title
Essential Blocks for Gutenberg < 4.5.4 - Contributor+ Stored Cross-Site Scripting
Slug
essential-blocks
Published
2024-04-18
Title
Essential Blocks < 4.5.10 - Contributor+ DOM-Based XSS via Social Icons Block
Slug
essential-blocks
Published
2024-05-16
Title
Essential Blocks < 4.5.13 - Contributor+ Stored XSS
Slug
essential-blocks
Published
2024-07-12
Title
Essential Blocks < 4.7.0 - Contributor+ Stored XSS
Slug
essential-blocks
Published
2024-09-30
Title
Essential Blocks for Gutenberg < 4.9.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
essential-blocks
Published
2025-01-07
Title
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates < 5.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Slug
essential-blocks
Published
2025-02-25
Title
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates < 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
essential-blocks
Published
2025-02-22
Title
Essential Blocks for Gutenberg < 4.8.4 - Missing Authorization
Slug
essential-blocks
Published
2025-03-07
Title
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates < 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
essential-blocks
Published
2025-05-26
Title
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates < 5.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider and Post Carousel Widgets
Slug
essential-blocks
Published
2025-10-17
Title
Essential Blocks < 5.7.2 - Authenticated (Author+) Server-Side Request Forgery
Slug
essential-blocks
Published
2025-10-17
Title
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns < 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
essential-blocks
Published
2025-12-16
Title
Essential Blocks < 5.7.3 - Missing Authorization To Authenticated (Author+) Information Disclosure
Slug
essential-blocks-pro
Published
2023-09-19
Title
Essential Blocks < 4.2.1 - Unauthenticated Object Injection
Slug
essential-blocks-pro
Published
2023-09-13
Title
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
Slug
essential-blocks-pro
Published
2023-09-13
Title
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products
Slug
essential-breadcrumbs
Published
2024-11-28
Title
Essential Breadcrumbs <= 1.1.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
essential-breadcrumbs
Published
2025-04-09
Title
Essential Breadcrumbs <= 1.1.1 - Cross-Site Request Forgery to Privilege Escalation
Slug
essential-content-types
Published
2021-09-20
Title
Multiple Plugins from CatchThemes - Unauthorised Plugin's Setting Change
Slug
essential-grid
Published
2023-11-09
Title
Essential Grid < 3.1.1 - Reflected XSS
Slug
essential-grid
Published
2023-11-14
Title
Essential Grid < 3.0.19 - Missing Authorization
Slug
essential-grid
Published
2024-04-09
Title
Essential Grid < 3.1.2 - Unauthenticated Private Post Disclosure