CVE-2026-10586

HighCVSS 7.2/10Last modified Jul 23, 2026

Description

The Gutenberg Essential Blocks – Page Builder for Gutenberg Blocks & Patterns plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 6.1.3 via the `save_ai_generated_image()` function. This makes it possible for authenticated attackers, with Author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-918

Affected software

No affected versions have been published.

Timeline

Published: Jun 5, 2026
Last modified: Jul 23, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-1058607.1Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary v CVE-2026-1058618.2Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, authenticated external URL-CVE-2026-1058628.7Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, CVE-2026-1058639.4Payload is a free and open source headless content management system. In versions after 3.0.0 and before 3.90.0, a custom field option that CVE-2026-1058644.3Payload is a free and open source headless content management system. In @payloadcms/plugin-multi-tenant versions before 3.90.0 and canary v CVE-2026-1058658.1Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, CVE-2026-1058667.5Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, CVE-2026-1058676.5Payload is a free and open source headless content management system. In @payloadcms/storage-s3 versions before 3.90.0 and canary versions b CVE-2026-1058687.1Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, CVE-2026-1058699.2Apache Pulsar's MultiRolesTokenAuthorizationProvider authorizes a client with all roles listed in a claim of its JSON Web Token (JWT). The p CVE-2026-105876.0A potential out-of-bounds write vulnerability could allow a local privileged attacker to modify power management settings in System Manageme CVE-2026-1058707.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Delight Star Inc. WP Associate Post R2