https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1664.htmlhttps://patchthecve.com/cve/CVE-2025-1664.htmlWed, 17 Jun 2026 08:39:33 +0000MEDIUM 6.4: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Parallax slider in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authhttps://patchthecve.com/cve/CVE-2024-13803.htmlhttps://patchthecve.com/cve/CVE-2024-13803.htmlWed, 17 Jun 2026 07:02:45 +0000MEDIUM 6.4: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-marker’ parameter in all versions up to, and including, 5.2.3 due to insufficient input sanitization and output escaping. This makes it possible https://patchthecve.com/cve/CVE-2025-26871.htmlhttps://patchthecve.com/cve/CVE-2025-26871.htmlWed, 17 Jun 2026 09:02:31 +0000MEDIUM 4.3: Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.3.https://patchthecve.com/cve/CVE-2024-12045.htmlhttps://patchthecve.com/cve/CVE-2024-12045.htmlWed, 17 Jun 2026 06:58:56 +0000MEDIUM 4.4: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the maker title value of the Google Maps block in all versions up to, and including, 5.0.9 due to insufficient input sanitization and output escaping. Thihttps://patchthecve.com/cve/CVE-2022-47594.htmlhttps://patchthecve.com/cve/CVE-2022-47594.htmlWed, 17 Jun 2026 05:13:54 +0000MEDIUM 6.5: Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through 3.8.5.https://patchthecve.com/cve/CVE-2023-51360.htmlhttps://patchthecve.com/cve/CVE-2023-51360.htmlWed, 17 Jun 2026 06:40:48 +0000MEDIUM 6.5: Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.https://patchthecve.com/cve/CVE-2023-51359.htmlhttps://patchthecve.com/cve/CVE-2023-51359.htmlWed, 17 Jun 2026 06:40:48 +0000MEDIUM 5.4: Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.https://patchthecve.com/cve/CVE-2023-47760.htmlhttps://patchthecve.com/cve/CVE-2023-47760.htmlWed, 17 Jun 2026 06:33:13 +0000MEDIUM 4.3: Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.https://patchthecve.com/cve/CVE-2024-47385.htmlhttps://patchthecve.com/cve/CVE-2024-47385.htmlWed, 17 Jun 2026 07:57:00 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.4.https://patchthecve.com/cve/CVE-2024-5595.htmlhttps://patchthecve.com/cve/CVE-2024-5595.htmlWed, 17 Jun 2026 08:16:15 +0000MEDIUM 5.4: The Essential Blocks WordPress plugin before 4.7.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attackshttps://patchthecve.com/cve/CVE-2024-30467.htmlhttps://patchthecve.com/cve/CVE-2024-30467.htmlWed, 17 Jun 2026 07:27:01 +0000MEDIUM 6.5: Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg.This issue affects Essential Blocks for Gutenberg: from n/a through 4.4.9.https://patchthecve.com/cve/CVE-2024-4891.htmlhttps://patchthecve.com/cve/CVE-2024-4891.htmlWed, 17 Jun 2026 08:03:07 +0000MEDIUM 6.4: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘tagName’ parameter in versions up to, and including, 4.5.12 due to insufficient input sanitization and output escaping. This makes it possible for authttps://patchthecve.com/cve/CVE-2024-3818.htmlhttps://patchthecve.com/cve/CVE-2024-3818.htmlWed, 17 Jun 2026 07:45:10 +0000MEDIUM 5.4: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's "Social Icons" block in all versions up to, and including, 4.5.9 due to insufficient input sanitization and output escaping on user supplied ahttps://patchthecve.com/cve/CVE-2024-31306.htmlhttps://patchthecve.com/cve/CVE-2024-31306.htmlWed, 17 Jun 2026 07:28:09 +0000MEDIUM 6.5: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Stored XSS.This issue affects Essential Blocks for Gutenberg: from n/a through 4.5.3.https://patchthecve.com/cve/CVE-2024-2255.htmlhttps://patchthecve.com/cve/CVE-2024-2255.htmlWed, 17 Jun 2026 07:24:09 +0000MEDIUM 6.4: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widgets in all versions up to, and including, 4.5.3 due to insufficient input sanitization and output escaping on user supplied attributes suchttps://patchthecve.com/cve/CVE-2024-1854.htmlhttps://patchthecve.com/cve/CVE-2024-1854.htmlWed, 17 Jun 2026 07:05:09 +0000MEDIUM 6.4: The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the blockId parameter in all versions up to, and including, 4.5.1 due to insufficient input sanitization and output escaping. This makes it possible for auhttps://patchthecve.com/cve/CVE-2023-2085.htmlhttps://patchthecve.com/cve/CVE-2023-2085.htmlWed, 28 Oct 2026 19:10:00 +0000MEDIUM 4.3: The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the templates function in versions up to, and including, 4.0.6. This makes it possible for subscriber-level attackers to obtain plugin template information. While a nonce