CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.2.0.
Explanation of Vulnerability in Simple Terms
Essential Blocks for Gutenberg versions up to 4.2.0 lack proper authorization checks on certain operations. A logged-in user with low privileges can modify or delete content they should not have access to. The vulnerability affects data integrity and availability but does not expose sensitive information. Update to a version newer than 4.2.0.
What an attacker can do
A low-privilege logged-in user can modify or delete content without proper authorization.
Potential impact on your site
Unauthorized users can alter or remove published content, posts, or blocks created by other users.
Conditions required to exploit
Attacker must have a low-privilege account on the WordPress site (e.g., Contributor or Subscriber role).
Key dates
External resources
Related vulnerabilities
