Extension WordPress
Vulnérabilités MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites
Cette page rassemble les failles publiées pour MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites
5 fiches
Maxi Blocks <= 2.1.9 – Authenticated (Author+) Stored Cross-Site Scripting via Style Card REST API
The Maxi Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `/wp-json/maxi-blocks/v1.0/style-card` REST API endpoint in all versions up to, and including, 2.1.9 due to insufficient input sanitization and output escaping of the `sc_styles` parameter.…
*-2.1.9
2.1.10
01/05/2026
Maxi Blocks <= 2.1.8 – Missing Authorization to Authenticated (Author+) Media File Deletion via 'old_media_src' Parameter
The MaxiBlocks Builder plugin for WordPress is vulnerable to arbitrary media file deletion due to insufficient file ownership validation on the 'maxi_remove_custom_image_size' AJAX action in all versions up to, and including, 2.1.8. This makes it possible for authenticated…
*-2.1.8
2.1.9
23/04/2026
MaxiBlocks <= 2.1.3 – Missing Authorization
The MaxiBlocks: 2300+ Patterns, 280+ Pages, 14.3K Icons & 100 Styles plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in all versions up to, and including, 2.1.3. This makes…
*-2.1.3
2.1.4
22/09/2025
MaxiBlocks <= 2.1.0 – Missing Authorization to Authenticated (Contributor+) Arbitrary Options Update
The MaxiBlocks: 2300+ Patterns, 280+ Pages, 14.3K Icons & 100 Styles plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on a function in all…
*-2.1.0
2.1.1
30/05/2025
MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles <= 1.9.2 – Authenticated (Subscriber+) Arbitrary File Deletion
The MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the maxi_remove_custom_image_size and maxi_add_custom_image_size functions in all versions up to, and…
*-1.9.2
1.9.3
22/07/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.