| Package | Affected versions | Patched versions |
|---|---|---|
| essential blocks | < 4.4.3 | 4.4.3 |
The Essential Blocks WordPress plugin before 4.4.3 does not prevent unauthenticated attackers from overwriting local variables when rendering templates over the REST API, which may lead to Local File Inclusion attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free