CVE-2023-2086

The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the template_count function in versions up to, and including, 4.0.6. This makes it possible for subscriber-level attackers to obtain plugin template information. While a nonce check is present, it is only executed when a nonce is provided. Not providing a nonce results in the nonce verification to be skipped. There is no capability check.

• CWE-862

• https://plugins.trac.wordpress.org/browser/essential-blocks/tags/4.0.6/includes/Admin/Admin.phpPatch
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2900595%40essential-blocks%2Ftrunk&old=2900029%40essential-blocks%2Ftrunk&sfp_email=&sfph_mail=#file2Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/9efc782a-ec61-4741-81fd-a263a2739e16?source=cveThird Party Advisory
• https://plugins.trac.wordpress.org/browser/essential-blocks/tags/4.0.6/includes/Admin/Admin.phpPatch
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=2900595%40essential-blocks%2Ftrunk&old=2900029%40essential-blocks%2Ftrunk&sfp_email=&sfph_mail=#file2Patch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/9efc782a-ec61-4741-81fd-a263a2739e16?source=cveThird Party Advisory

Published

Jun 9, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-20854VMware Workstation contains an arbitrary file deletion vulne…8.4
• CVE-2023-20855VMware vRealize Orchestrator contains an XML External Entity…8.8
• CVE-2023-20856VMware vRealize Operations (vROps) contains a CSRF bypass vu…8.8
• CVE-2023-20857VMware Workspace ONE Content contains a passcode bypass vuln…6.8
• CVE-2023-20858VMware Carbon Black App Control 8.7.x prior to 8.7.8, 8.8.x …7.2
• CVE-2023-20859In Spring Vault, versions 3.0.x prior to 3.0.2 and versions …5.5
• CVE-2023-20860Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.…7.5
• CVE-2023-20861In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, …6.5
• CVE-2023-20862In Spring Security, versions 5.7.x prior to 5.7.8, versions …6.3
• CVE-2023-20863In spring framework versions prior to 5.2.24 release+ ,5.3.2…6.5
• CVE-2023-20864VMware Aria Operations for Logs contains a deserialization v…9.8
• CVE-2023-20865VMware Aria Operations for Logs contains a command injection…7.2