Skip to content
OpenAdvisories
High · 7.5 CVE-2025-48332 EUVD-2025-24751GHSA-28qh-gf6m-p898

WordPress Gutenberg Blocks <= 3.3.1 - Local File Inclusion Vulnerability

Published Aug 14, 2025 · Updated May 12, 2026 · Assigned by Patchstack

Description

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows PHP Local File Inclusion.This issue affects Gutenberg Blocks: from n/a through <= 3.3.1.

Affected products

VendorProductAffectedFixed
PublishPress Gutenberg Blocks ≤ 3.3.1 —

References