Product · wpdevteam

Essential Blocks Pro

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 8.1

CVE-2023-4386

Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_posts function. This allows unauthenticated attackers to inject a PHP Object. No POP chai…

wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns Essential Blocks Pro Web / CMS

Oct 20, 2023
High 8.1

CVE-2023-4402

Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_products function. This allows unauthenticated attackers to inject a PHP Object. No POP c…

wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns Essential Blocks Pro Web / CMS

Oct 20, 2023