CVE-2026-123466
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
The Premium Blocks – Gutenberg Blocks for WordPress plugin (up to version 2.3.18) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
Risk Assessment
An attacker could gain access to functions or data they are not authorized to use, potentially leading to content modification or information disclosure.
Recommendation
Update the Premium Blocks plugin to the latest version (above 2.3.18) and review user permissions.
Other vulnerabilities in Premium Blocks – Gutenberg Blocks for WordPress
See all- CVE-2026-123474Medium
The Premium Blocks – Gutenberg Blocks for WordPress plugin (through version 2.3.18) contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels.
- CVE-2026-94118Medium
Cross Site Scripting (XSS) vulnerability in the Premium Blocks – Gutenberg Blocks for WordPress plugin in versions up to and including 2.3.17. The vulnerability can be exploited by a user with Contributor privileges.
Original NVD description (English source)
Missing Authorization vulnerability in LeapWorx Premium Blocks – Gutenberg Blocks for WordPress premium-blocks-for-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Premium Blocks – Gutenberg Blocks for WordPress: from n/a through 2.3.18.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS