CVE-2025-26871

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-26871
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.3.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://patchstack.com/database/Wordpress/Plugin/essential-blocks/vulnerability/wordpress-essential-blocks-plugin-4-8-3-broken-access-control-vulnerability?_s_id=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:wpdeveloper:essential_blocks:*:*:*:*:free:wordpress:*:*
History

23 Apr 2026, 15:25

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 8.8 		v2 : unknown
v3 : 4.3

01 Apr 2026, 17:18

Type Values Removed Values Added
Summary (en) Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Essential Blocks for Gutenberg: from n/a through 4.8.3. (en) Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.3.
CVSS v2 : unknown
v3 : 4.3 		v2 : unknown
v3 : 8.8
References
  • {'url': 'https://patchstack.com/database/wordpress/plugin/essential-blocks/vulnerability/wordpress-essential-blocks-plugin-4-8-3-broken-access-control-vulnerability?_s_id=cve', 'tags': ['Third Party Advisory'], 'source': 'audit@patchstack.com'}
  • () https://patchstack.com/database/Wordpress/Plugin/essential-blocks/vulnerability/wordpress-essential-blocks-plugin-4-8-3-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory

10 Apr 2025, 17:53

Type Values Removed Values Added
Summary
  • (es) La vulnerabilidad de falta de autorización en Essential Blocks for Gutenberg de WPDeveloper permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Essential Blocks for Gutenberg: desde n/a hasta 4.8.3.
References () https://patchstack.com/database/wordpress/plugin/essential-blocks/vulnerability/wordpress-essential-blocks-plugin-4-8-3-broken-access-control-vulnerability?_s_id=cve - () https://patchstack.com/database/wordpress/plugin/essential-blocks/vulnerability/wordpress-essential-blocks-plugin-4-8-3-broken-access-control-vulnerability?_s_id=cve - Third Party Advisory
First Time Wpdeveloper
Wpdeveloper essential Blocks
CPE cpe:2.3:a:wpdeveloper:essential_blocks:*:*:*:*:free:wordpress:*:*

25 Feb 2025, 15:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-25 15:15

Updated : 2026-04-23 15:25

NVD link : CVE-2025-26871

Mitre link : CVE-2025-26871

CVE.ORG link : CVE-2025-26871

JSON object : View

Products Affected

wpdeveloper

  • essential_blocks
CWE
CWE-862

Missing Authorization