Nko vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Nko products: 1 record(s), with severity, exploitation and fixes.

Custom Block Builder – Lazy Blocks 1

Exploited only (KEV) →

CVE-2026-1560 High · 8.8 CWE-94 Feb 11, 2026

Custom Block Builder – Lazy Blocks <= 4.2.0 - Authenticated (Contributor+) Remote Code Execution

The Custom Block Builder – Lazy Blocks plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.0 via multiple functions in the 'LazyBlocks_Blocks' class. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.