CVE-2026-13154 in Gutenberg Essential Blocks Plugininformación

Resumen

por MITRE • 2026-08-06

The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not verify that an attacker-supplied post type is publicly viewable before querying it in one of its public REST routes, allowing unauthenticated users to read published entries of custom post types that the site registered as non-public.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsable

WPScan

Reservar

2026-06-24

Divulgación

2026-08-06

Moderación

aceptado

Artículo

VDB-386472

CPE

listo

EPSS

0.00000

KEV

no

Actividades

muy bajo

Sector

Hostingprovider

Fuentes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-13154
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-13154
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-13154/

◂ AnteriorVisión De ConjuntoPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!