Cross-site Scripting Vulnerability in WP Engine's Gutenberg Blocks – ACF Blocks Suite

CVE-2025-50041

What is CVE-2025-50041?

The application is susceptible to Cross-site Scripting (XSS) attacks, specifically through the Gutenberg Blocks – ACF Blocks Suite for WordPress. This vulnerability allows attackers to inject malicious scripts into web pages generated by the plugin, enabling the potential for stored XSS exploits. This could result in unauthorized actions being taken on behalf of users, data theft, or dissemination of malware. It is crucial for users of the ACF Blocks Suite from versions n/a to 2.6.11 to apply security measures to safeguard their websites against this exploitation risk.

References