Approved changes feed: RSS · Atom

cpe:2.3:a:spicethemes:spice_blocks:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSpicethemes (4bddfdc8-4665-5c0f-aa60-36033a13f0b1)
ProductSpice Blocks (4a925017-ae1d-54d8-9e02-071a588d63f0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-48130 vulnerable 2026-06-08 07:27:15.511621 WordPress Spice Blocks plugin <= 2.0.7.4 - Arbitrary File Download vulnerability
HIGH (7.5)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spicethemes Spice Blocks spice-blocks allows Path Traversal.This issue affects Spice Blocks: from n/a through <= 2.0.7.4.
Published: 2025-06-09T15:54:01.031Z
Updated: 2026-04-28T16:12:52.327Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-39532 vulnerable 2026-06-08 07:23:06.713643 WordPress Spice Blocks plugin <= 2.0.7.7 - Broken Access Control vulnerability
HIGH (7.5)
Missing Authorization vulnerability in spicethemes Spice Blocks spice-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spice Blocks: from n/a through <= 2.0.7.7.
Published: 2025-04-17T15:46:54.592Z
Updated: 2026-04-28T16:12:34.145Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.