Skip to content
Sign in
6.5 Medium

CVE-2024-4260 The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts…

Description

The Page Builder Gutenberg Blocks WordPress plugin before 3.1.12 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks.

Affected products and versions

Product Affected versions Fixed in
Page Builder Gutenberg Blocks 3.1 earliest → < 3.1.12 3.1.12
page_builder_gutenberg_blocks 3.1 earliest → < 3.1.12 3.1.12

Other CVEs of Page Builder Gutenberg Blocks

The 3 CVEs of Page Builder Gutenberg Blocks →
CVE-2024-7132 The Page Builder Gutenberg Blocks WordPress plugin before 3.1.13 does not escape the content of post embed via one of… 4.8 Medium CVE-2024-2369 The Page Builder Gutenberg Blocks WordPress plugin before 3.1.7 does not validate and escape some of its block options… 5.4 Medium
Track this CVE