4.3
Moyenne
CVE-2023-2087 The Essential Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and…
Description
The Essential Blocks plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.6. This is due to missing or incorrect nonce validation on the save function. This makes it possible for unauthenticated attackers to change plugin settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates 4.0 | premières → 4.0.6 | Pas de correctif indiqué |
| Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns 4.0 | premières → 4.0.6 | Pas de correctif indiqué |
Autres CVE de Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates
Les 15 CVE de Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates →
CVE-2025-1664
The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to…
6.4
Moyenne
CVE-2024-13803
The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to…
6.4
Moyenne
CVE-2024-12045
The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to…
4.4
Moyenne
CVE-2024-4891
The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to…
6.4
Moyenne