WordPress CMS Blocks Plugin Broken Access Control Vulnerability
Vulnerability
A missing authorization vulnerability has been identified in the WordPress CMS Blocks plugin, specifically in versions through 1.1. This vulnerability allows exploitation of improperly configured access control levels, potentially enabling users to perform actions reserved for higher privileges.
Impact
Exploitation of this vulnerability could lead to unauthorized access and actions being performed at a higher privilege level, disrupting the intended access control mechanisms of the application.
Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
5.0exploitability
5.2remediation
0.0relevance
0.2threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.