Premium Blocks – Gutenberg Blocks for WordPress vulnerabilities

3 known CVE vulnerabilities in Premium Blocks – Gutenberg Blocks for WordPress, translated and rated.

CVE-2026-123474Medium
The Premium Blocks – Gutenberg Blocks for WordPress plugin (through version 2.3.18) contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels.
CVE-2026-123466Medium
The Premium Blocks – Gutenberg Blocks for WordPress plugin (up to version 2.3.18) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
CVE-2026-94118Medium
Cross Site Scripting (XSS) vulnerability in the Premium Blocks – Gutenberg Blocks for WordPress plugin in versions up to and including 2.3.17. The vulnerability can be exploited by a user with Contributor privileges.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS