Actively Exploited in the Wild
This vulnerability is being actively exploited in the wild.
WordPress MaxiBlocks Plugin Privilege Escalation Vulnerability
Vulnerability
A missing authorization vulnerability in the WordPress MaxiBlocks plugin, affecting versions through 2.1.0, allows for privilege escalation. This vulnerability could enable a low-privileged user to gain higher privileges, potentially leading to full control of the website.
Impact
Exploitation of this vulnerability could allow a low-privileged user to escalate their privileges, gaining higher access rights and possibly full control over the website.
Remediation
Users of the WordPress MaxiBlocks plugin are advised to update to version 2.1.0 or later. For those unable to update immediately, Patchstack has issued a virtual patch that blocks attacks targeting this vulnerability.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.