Vulnerabilidades de wpdevteam Essential Blocks Pro (CVE)

Registros CVE publicados para wpdevteam Essential Blocks Pro, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

2 resultados
8.1Alta
CVE-2023-4386

Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries

wpdevteam Essential Blocks Pro; wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_posts function. This allows unauthenticated attackers to inject a PHP Object. No POP chai…

8.1Alta
CVE-2023-4402

Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products

wpdevteam Essential Blocks Pro; wpdevteam Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns

The Essential Blocks plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.2.0 via deserialization of untrusted input in the get_products function. This allows unauthenticated attackers to inject a PHP Object. No POP c…

1.5%EPSS