wpdevteam Essential Blocks Pro vulnerabilities (CVE)

CVE records published for wpdevteam Essential Blocks Pro, newest first. Follow to get an email when a new one appears.

2 results

8.1High

CVE-2023-4386 3 years ago

Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

wpdevteam Essential Blocks Pro; wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_posts function. This allows unauthenticated attackers to inject a PHP Object. No POP chai…

8.1High

CVE-2023-4402 3 years ago

Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

wpdevteam Essential Blocks Pro; wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_products function. This allows unauthenticated attackers to inject a PHP Object. No POP c…

1.5%EPSS