WordPress plugin
Essential Blocks Pro security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium0
- Low0
All Essential Blocks Pro vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.1 | Unauthenticated PHP Object Injection via products ≤4.2.0Update to 4.2.1 | CVE-2023-4402 | |
| High8.1 | Unauthenticated PHP Object Injection via queries ≤4.2.0Update to 4.2.1 | CVE-2023-4386 |
- High8.1Unauthenticated PHP Object Injection via products
≤4.2.0Update to 4.2.1
- High8.1Unauthenticated PHP Object Injection via queries
≤4.2.0Update to 4.2.1
Essential Blocks Pro: common questions
Does Essential Blocks Pro have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Essential Blocks Pro: 2 high. None are known to affect version null.
How do I check which version of Essential Blocks Pro I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Essential Blocks Pro vulnerability?
CVE-2023-4402, published Sep 13, 2023: Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products. Severity: High (CVSS 8.1).
Is any Essential Blocks Pro vulnerability listed in CISA KEV?
No. None of the known Essential Blocks Pro vulnerabilities is currently listed in the CISA KEV catalog.