CVE-2025-50034: 
WordPress vulnerability analysis and mitigation

CVE-2025-50034 is a Missing Authorization vulnerability discovered in Enhanced Blocks – Page Builder Blocks for Gutenberg plugin versions through 1.4.1. The vulnerability was published on June 20, 2025, and was reported by Patchstack. The vulnerability is classified as a Missing Authorization issue (CWE-862) with a CVSS v3.1 Base Score of 6.5 (MEDIUM) (NVD, Wiz).

The vulnerability has a CVSS vector string of CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N, indicating that it can be exploited over the network with low attack complexity and requires low privileges. The issue stems from incorrectly configured access control security levels in the Enhanced Blocks plugin (Wiz, Patchstack).

The vulnerability allows exploiting incorrectly configured access control security levels, which could enable an unprivileged user to execute certain higher privileged actions. This broken access control issue could potentially compromise the security of affected WordPress installations (Patchstack).

As there is no official fix available, it is recommended to urgently consider replacing the software with an alternative. Note that merely deactivating the software does not remove the security threat unless a virtual patch (vPatch) is deployed (Patchstack).