Gutenberg Blocks – ACF Blocks Suite
Gutenberg Blocks – ACF Blocks Suite has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.
2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.
2 independent researchers contributed these findings, one record each. Gutenberg Blocks – ACF Blocks Suite is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.
CVE-2025-50041Gutenberg Blocks – ACF Blocks Suite <= 2.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Read the full analysisVulnerability Records

Gutenberg Blocks – ACF Blocks Suite
Author
WP Engine
ACF Blocks Suite – Ready to use Gutenberg Blocks ACF Blocks Suite is a collection of ready-to-use Gutenberg Blocks for WordPress. Supercharge your Gutenberg editor with high-quality creative WordPress blocks. This Gutenberg addon helps you make a beautiful WordPress website. Checkout Live ACF Blocks Demos. An Ultimate Gutenberg Blocks Suite Scrollable Image Block Tab Block Toggle Block Accordion Block Image Slider Block Social Sharing Block Photo Collage Block Posts Block Testimonial Block Team Block Multi Buttons Block Pricing Box Block Price List Block Start Rating Block Progress Bar Block Counter Number Block Click to tweet Block Business Hours Block Facebook Page Block Acf Meta Display Block Facebook Like Button Block Divider Block Random Image Block Important Note: ACF Blocks is built on-top of Advanced Custom Fields Pro. This plugin requires ACF PRO to function. Make sure you have ACF PRO installed and activated.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C