WP Vulnerability WatchVulnerability data as of September 7, 2026

Known vulnerabilities in Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns

Gutenberg block editor with AI. 70+ Gutenberg blocks, patterns, WooCommerce blocks, post grid, gallery, menu with Gutenberg block library.

33Reported vulnerabilities
9.8Highest CVSS score
6.4.2Latest version
200,000+Active installs

What to do now

Update Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns to 6.4.0 or later. 33 of these have a fixed version available. Updating resolves them.

Plugin last updated: August 17, 2026 / Tested up to WordPress: 7.0.4 / View on wordpress.org

Reported vulnerabilities

Ordered by how urgently they need attention — whether a vulnerability is actually being exploited, and how likely exploitation is, rather than CVSS severity alone.

CVESeverityExploit probability
next 30 days		 Affected versionsFixed inPublished
CVE-2023-6623 Critical 9.8 50.7% Before 4.4.3 4.4.3 January 15, 2024
CVE-2023-4402 Critical 9.8 1.3% Before 4.2.1
Before 1.1.1		 4.2.1 October 20, 2023
CVE-2023-4386 High 8.1 0.8% 4.2.0 and earlier 1.1.1 October 20, 2023
CVE-2026-10586 High 7.2 0.3% 0 to 6.1.3 (inclusive) 6.1.4 June 5, 2026
CVE-2026-10833 Medium 6.4 0.3% 0 to 6.1.4 (inclusive) 6.2.0 June 25, 2026
CVE-2026-4658 Medium 6.4 0.4% 0 to 6.0.4 (inclusive) 6.1.0 May 2, 2026
CVE-2025-11361 Medium 6.4 0.3% 0 to 5.7.1 (inclusive) 5.7.2 October 18, 2025
CVE-2025-4682 Medium 6.4 0.3% 0 to 5.4.0 (inclusive) 5.4.1 May 27, 2025
CVE-2024-13803 Medium 6.4 0.5% 5.2.3 and earlier 5.3.0 February 25, 2025
CVE-2024-5595 Medium 6.4 0.4% 4.6.1 and earlier 4.7.0 July 12, 2024
CVE-2024-31306 Medium 6.4 0.4% 4.5.3 and earlier 4.5.4 April 5, 2024
CVE-2024-1854 Medium 6.4 0.4% 4.5.1 and earlier 4.5.2 February 28, 2024
CVE-2025-11270 Medium 6.4 0.2% 0 to 5.7.1 (inclusive) 5.7.2 October 18, 2025
CVE-2024-47385 Medium 6.4 0.2% 4.8.4 and earlier 4.9.0 September 30, 2024
CVE-2024-4891 Medium 5.4 0.5% 0 to 4.5.12 (inclusive) 4.5.13 May 18, 2024
CVE-2024-3818 Medium 5.4 0.3% 0 to 4.5.9 (inclusive) 4.5.10 April 19, 2024
CVE-2024-2255 Medium 5.4 0.6% Before 4.5.3 4.5.3 March 20, 2024
CVE-2023-7071 Medium 5.4 0.4% 4.4.6 and earlier 4.4.7 January 11, 2024
CVE-2023-51359 Medium 5.4 0.6% 4.2.0 and earlier 4.2.1 December 26, 2023
CVE-2026-13153 Medium 5.3 0.3% 6.3.0 and earlier 6.4.0 August 3, 2026
CVE-2026-13154 Medium 5.3 0.3% 6.3.0 and earlier 6.4.0 August 3, 2026
CVE-2025-1664 Medium 5.4 0.2% 0 to 5.3.1 (inclusive) 5.3.2 March 8, 2025
CVE-2024-12045 Medium 4.8 0.2% 0 to 5.1.0 (inclusive) 5.1.1 January 8, 2025
CVE-2023-2086 Medium 4.3 0.6% 4.0.6 and earlier 4.0.7 June 9, 2023
CVE-2023-2085 Medium 4.3 0.6% 4.0.6 and earlier 4.0.7 June 9, 2023
CVE-2023-2084 Medium 4.3 0.5% 4.0.6 and earlier 4.0.7 June 9, 2023
CVE-2023-2083 Medium 4.3 0.6% 4.0.6 and earlier 4.0.7 June 9, 2023
CVE-2025-11369 Medium 4.3 0.3% 0 to 5.7.2 (inclusive) 5.7.3 December 17, 2025
CVE-2025-26871 Medium 4.3 0.4% 4.8.3 and earlier 4.8.4 February 22, 2025
CVE-2024-30467 Medium 4.3 0.4% 4.4.9 and earlier 4.4.10 March 28, 2024
CVE-2023-47760 Medium 4.3 0.4% 4.2.0 and earlier 4.2.1 November 13, 2023
CVE-2023-2087 Medium 4.3 0.3% 4.0.6 and earlier 4.0.7 June 9, 2023
CVE-2022-47594 Medium 4.3 0.4% 3.8.5 and earlier 3.8.6 January 20, 2023

Sources: vulnerability records from NVD, exploitation from CISA KEV, exploit probability from EPSS. Affected versions come from CPE ranges or from the reporting CNA.