CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.
Explanation of Vulnerability in Simple Terms
Essential Blocks for Gutenberg versions up to 4.2.0 lack proper authorization checks on certain operations. A logged-in user with low privileges can modify content or settings they should not have access to. The vulnerability requires an active WordPress account but no special interaction from other users. Update to a version newer than 4.2.0 to resolve this issue.
What an attacker can do
A logged-in user can modify content or settings beyond their assigned permissions.
Potential impact on your site
Unauthorized users may alter site content, settings, or data they should not be able to access.
Conditions required to exploit
Attacker must have a valid WordPress user account with low-level privileges (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
