/Vulnerability Library

Essential Blocks < 6.4.0 - Information Disclosure

CVE-2026-13153
Verified

Description

Gutenberg Essential Blocks WordPress plugin < 6.4.0 contains an information disclosure caused by unrestricted access to a public REST route exposing non-public WooCommerce sales metrics, letting unauthenticated users read product sales data.

Severity

Medium

CVSS Score

7.5

Exploit Probability

2%

Published Date

September 11, 2026

Template Author

str4k3r

CVE-2026-13153.yaml
7.5Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVE ID:
cve-2026-13153
CWE ID:
cwe-200

References

https://wpscan.com/vulnerability/0401a229-9630-49ab-ae4b-53360cf5d109/https://nvd.nist.gov/vuln/detail/CVE-2026-13153

Remediation Steps

Update to version 6.4.0 or later.