Skip to content
OpenAdvisories

Product · unitecms

Blox Page Builder

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-6315

    Blox Page Builder <= 1.0.65 - Authenticated (Contributor+) Arbitrary File Upload

    The Blox Page Builder plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'handleUploadFile' function in all versions up to, and including, 1.0.65. This makes it possible for authenticated attackers, with co…

    unitecms Blox Page Builder Web / CMS