CVE-2021-24546: Extendify Editorskit

High severity, CVSS 8.8. EPSS: 1.8% chance of exploitation in the next 30 days.

The Gutenberg Block Editor Toolkit – EditorsKit WordPress plugin before 1.31.6 does not sanitise and validate the Conditional Logic of the Custom Visibility settings, allowing users with a role as low contributor to execute Arbitrary PHP code

Affected products

• Extendify Editorskit: before 1.31.6 (fixed in 1.31.6)

Published 2021-10-11. Last modified 2026-06-17.