Gutenberg Blocks – ACF Blocks Suite

Gutenberg Blocks – ACF Blocks Suite has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2025; 2 are fixed and 1 remains unpatched as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10.

The most common weakness is Cross-Site Scripting, behind 2 of the records (67%). Other recurring categories include Missing Authorization.

2 of the records (67%) have a vendor fix, while 1 remain unpatched. The oldest unresolved one dates back to 2025.

2 independent researchers contributed these findings, one record each. Gutenberg Blocks – ACF Blocks Suite is installed on roughly 400 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage67%
Open

1

Fixed

2

Get automatic notifications for all Gutenberg Blocks – ACF Blocks Suite vulnerabilities before they are exploited.

Most severe open issueCVSS 6.4CVE-2025-50041

Gutenberg Blocks – ACF Blocks Suite <= 2.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

3 records
Gutenberg Blocks – ACF Blocks Suite banner
Latestv2.6.11

Gutenberg Blocks – ACF Blocks Suite

WP Engine

Author

WP Engine

3.4(13)
68/100
Last Updated
2025-01-28 (2y ago)
Active Installs
400+
Downloads
37,409
Requires WP
5.0+
Requires PHP
5.6+
Tested up to
WP 6.7.7
Created
2019-04-18 (8y ago)

ACF Blocks Suite – Ready to use Gutenberg Blocks ACF Blocks Suite is a collection of ready-to-use Gutenberg Blocks for WordPress. Supercharge your Gutenberg editor with high-quality creative WordPress blocks. This Gutenberg addon helps you make a beautiful WordPress website. Checkout Live ACF Blocks Demos. An Ultimate Gutenberg Blocks Suite Scrollable Image Block Tab Block Toggle Block Accordion Block Image Slider Block Social Sharing Block Photo Collage Block Posts Block Testimonial Block Team Block Multi Buttons Block Pricing Box Block Price List Block Start Rating Block Progress Bar Block Counter Number Block Click to tweet Block Business Hours Block Facebook Page Block Acf Meta Display Block Facebook Like Button Block Divider Block Random Image Block Important Note: ACF Blocks is built on-top of Advanced Custom Fields Pro. This plugin requires ACF PRO to function. Make sure you have ACF PRO installed and activated.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C