CVE-2025-26871: WordPress Essential Blocks plugin <= 4.8.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.3.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-26871?
CVE-2025-26871 is classified as a high-severity vulnerability due to its potential for unauthorized access under incorrectly configured security levels.
How do I fix CVE-2025-26871?
To fix CVE-2025-26871, update the Essential Blocks for Gutenberg plugin to version 4.8.4 or later.
What versions are affected by CVE-2025-26871?
CVE-2025-26871 affects Essential Blocks for Gutenberg versions up to and including 4.8.3.
What kind of vulnerability is CVE-2025-26871?
CVE-2025-26871 is a missing authorization vulnerability that allows for exploitation of access control issues.
Who is the vendor associated with CVE-2025-26871?
The vendor associated with CVE-2025-26871 is WPDeveloper.