Known vulnerabilities in the Gutenberg Blocks plugin
14 security advisories have been published for the Gutenberg Blocks plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Gutenberg Blocks - Remote Code Execution (CVE-2026-9227) HIGH
- Gutenberg Blocks - Cross-Site Scripting (XSS) (CVE-2025-8566) MEDIUM
- Gutenberg Blocks - Cross-Site Scripting (XSS) (CVE-2024-10872) MEDIUM
- Gutenberg Blocks - Broken Access Control (CVE-2024-6491) MEDIUM
- Gutenberg Blocks - Broken Access Control (CVE-2024-6489) MEDIUM
- Gutenberg Blocks - Cross-Site Scripting (XSS) (CVE-2024-3588) MEDIUM
- Gutenberg Blocks - Cross-Site Scripting (XSS) (CVE-2024-1948) MEDIUM
- Gutenberg Blocks - Information Disclosure (CVE-2023-7072) HIGH
- Gutenberg Blocks - Security Vulnerability (CVE-2023-6963) MEDIUM
- Gutenberg Blocks - Broken Access Control (CVE-2023-6959) MEDIUM
- Gutenberg Blocks - Cross-Site Scripting (XSS) (CVE-2023-6645) MEDIUM
- Gutenberg Blocks - Security Vulnerability (CVE-2023-1910) MEDIUM
- Gutenberg Blocks - Server-Side Request Forgery (SSRF) (CVE-2023-1895) HIGH
- Gutenberg Blocks - Cross-Site Request Forgery (CSRF) (CVE-2023-0484) MEDIUM