Skip to content
Sign in
4.3 Medium

CVE-2023-2083 The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability…

Description

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the save function in versions up to, and including, 4.0.6. This makes it possible for subscriber-level attackers to save plugin settings. While a nonce check is present, it is only executed when a nonce is provided. Not providing a nonce results in the nonce verification to be skipped. There is no capability check.

Affected products and versions

Product Affected versions Fixed in
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates 4.0 earliest → 4.0.6 No fix stated
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns 4.0 earliest → 4.0.6 No fix stated

Other CVEs of Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates

The 15 CVEs of Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates →
CVE-2025-1664 The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to… 6.4 Medium CVE-2024-13803 The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to… 6.4 Medium CVE-2024-12045 The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to… 4.4 Medium CVE-2024-4891 The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to… 6.4 Medium
Track this CVE