CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.3.
Explanation of Vulnerability in Simple Terms
Essential Blocks for Gutenberg versions up to 4.8.3 lack proper authorization checks on certain operations. A logged-in user with low privileges can modify content or settings they should not have access to. Update to a version newer than 4.8.3 to resolve this issue.
What an attacker can do
A low-privilege logged-in user can modify content or settings without proper authorization.
Potential impact on your site
Unauthorized users may alter site content, block settings, or other protected data within the plugin.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., Contributor or Subscriber).
Key dates
External resources
Related vulnerabilities
