Skip to content
Sign in
4.3 Medium

CVE-2023-2087 The Essential Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and…

Description

The Essential Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.6. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to change plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.

Affected products and versions

Product Affected versions Fixed in
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates 4.0 earliest → 4.0.6 No fix stated
Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns 4.0 earliest → 4.0.6 No fix stated

Other CVEs of Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates

The 15 CVEs of Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates →
CVE-2025-1664 The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to… 6.4 Medium CVE-2024-13803 The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to… 6.4 Medium CVE-2024-12045 The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to… 4.4 Medium CVE-2024-4891 The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to… 6.4 Medium
Track this CVE