Threats tagged 'ghsa-x777-p9m5-h8hq'

CVE-2026-13153 is an information exposure vulnerability in the Gutenberg Essential Blocks WordPress plugin before version 6.4.0. The plugin does not restrict access to a public REST route, which causes it to expose a non-public WooCommerce per-product sales metric. This allows unauthenticated users to read the lifetime number of units sold for any published product.