CVE Tools
Track your stack

Essential Blocks

25 CVEs tracked. None of them is in CISA KEV.

This hub aggregates every CVE we track for Essential Blocks, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Essential Blocks CVEs per month

Nov 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Essential Blocks CVEs per month
MonthCVEs
2024-110
2024-124
2025-011
2025-022
2025-031
2025-040
2025-050
2025-060
2025-070
2025-080
2025-090
2025-100
2025-110
2025-120
2026-010
2026-020
2026-030
2026-040
2026-050
2026-060
2026-070
2026-080
2026-090
2026-100

Severity

How the 25 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical14%
  • High28%
  • Medium2288%

Latest CVEs

The 15 most recently published vulnerabilities affecting Essential Blocks.

  1. CVE-2025-1664Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4
  2. CVE-2024-13803Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4
  3. CVE-2025-26871WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability4.3
  4. CVE-2024-12045Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 5.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting4.4
  5. CVE-2022-47594WordPress Essential Blocks for Gutenberg plugin <= 3.8.5 - Broken Access Control6.5
  6. CVE-2023-47760WordPress Essential Blocks plugin <= 4.2.0 - Broken Access Control vulnerability4.3
  7. CVE-2023-51360WordPress Essential Blocks plugin <= 4.2.0 - Multiple Subscriber+ Broken Access Control vulnerability6.5
  8. CVE-2023-51359WordPress Essential Blocks plugin <= 4.2.0 - Multiple Contributor+ Broken Access Control vulnerability5.4
  9. CVE-2024-47385WordPress Essential Blocks plugin <= 4.8.4 - Cross Site Scripting (XSS) vulnerability6.5
  10. CVE-2024-5595Essential Blocks < 4.7.0 - Contributor+ Stored XSS5.4
  11. CVE-2024-30467WordPress Essential Blocks plugin <= 4.4.9 - Broken Access Control vulnerability6.5
  12. CVE-2024-4891Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.12 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4
  13. CVE-2024-3818Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block5.4
  14. CVE-2024-31306WordPress Essential Blocks plugin <= 4.5.3 - Cross Site Scripting (XSS) vulnerability6.5
  15. CVE-2024-2255Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4

Product grouping is registry-driven, with AI assist and human review. How it works