CVE-2025-26871: Wpdeveloper Essential Blocks

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

Missing Authorization vulnerability in WPDeveloper Essential Blocks for Gutenberg essential-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Essential Blocks for Gutenberg: from n/a through <= 4.8.3.

Affected products

• Wpdeveloper Essential Blocks: before 4.8.4 (fixed in 4.8.4)

Published 2025-02-25. Last modified 2026-06-17.