Vulnerabilities > Wpdeveloper > Essential Blocks > High
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-06-09 | CVE-2024-30467 | Missing Authorization vulnerability in Wpdeveloper Essential Blocks Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg.This issue affects Essential Blocks for Gutenberg: from n/a through 4.4.9. | 8.8 |
2023-10-20 | CVE-2023-4386 | Deserialization of Untrusted Data vulnerability in Wpdeveloper Essential Blocks The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_posts function. | 8.1 |