Skip to content
OpenAdvisories

Product · spicethemes

Spice Blocks

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2025-48130

    WordPress Spice Blocks plugin <= 2.0.7.4 - Arbitrary File Download vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spicethemes Spice Blocks spice-blocks allows Path Traversal.This issue affects Spice Blocks: from n/a through <= 2.0.7.4.

    spicethemes Spice Blocks
  • High 7.5
    CVE-2025-39532

    WordPress Spice Blocks plugin <= 2.0.7.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in spicethemes Spice Blocks spice-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spice Blocks: from n/a through <= 2.0.7.7.

    spicethemes Spice Blocks