CVE-2024-3818

🗓️ 19 Apr 2024 02:34:43Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 65 Views

The Essential Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting (CVE-2024-3818)

Reporter	Title	Published	Views	Family All 12
CNNVD	WordPress Plugin Essential Blocks 安全漏洞	19 Apr 202400:00	–	cnnvd
Cvelist	CVE-2024-3818 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block	19 Apr 202402:34	–	cvelist
EUVD	EUVD-2024-32389	3 Oct 202520:07	–	euvd
NVD	CVE-2024-3818	19 Apr 202403:15	–	nvd
OSV	CVE-2024-3818	19 Apr 202403:15	–	osv
Patchstack	WordPress Essential Blocks for Gutenberg Plugin <= 4.5.9 is vulnerable to Cross Site Scripting (XSS)	19 Apr 202400:00	–	patchstack
Patchstack	WordPress Essential Blocks plugin <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block vulnerability	19 Apr 202402:10	–	patchstack
Positive Technologies	PT-2024-27896 · WordPress · The Essential Blocks – Page Builder Gutenberg Blocks	18 Apr 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-3818	23 May 202509:20	–	redhatcve
Vulnrichment	CVE-2024-3818 Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.9 - Authenticated (Contributor+) DOM-Based Cross-Site Scripting via "Social Icons" Block	19 Apr 202402:34	–	vulnrichment

NVD

Vulners

Node

wpdeveloper essential_blocksRange<4.5.10freewordpress

[
  {
    "vendor": "wpdevteam",
    "product": "Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "4.5.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/changeset/3072932/essential-blocks/tags/4.5.10/blocks/social/src/components/depricated-social-links-1.js
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/6b226067-0287-4f7e-9415-dc3c83f2fd27

08 Apr 2026 18:21Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.15.4

EPSS0.0022

SSVC

CWE-79