CVE-2026-125819 · Package
NO FIX YET
PublishPress Gutenberg Blocks (advanced-gutenberg) has a missing authorization check that allows exploiting incorrectly configured access control levels. The affected versions are all releases through 3.7.6.
first public Nov 13, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Sites running the PublishPress Gutenberg Blocks (advanced-gutenberg) WordPress plugin at version 3.7.6 or earlier. The flaw concerns access control settings, so sites that rely on custom role or block restrictions are the most relevant. The sources do not say what the minimum privilege needed is.
Not affected if plugin-not-installed
Who cares gutenberg-blocks, publishpress, wordpress
wp-content/plugins/advanced-gutenberg.3.7.6 as affected.No fix yet, per the sources.
Missing Authorization vulnerability in PublishPress Gutenberg Blocks advanced-gutenberg allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks: from n/a through 3.7.6.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.