Vulnerabilidades do Nko Custom Block Builder – Lazy Blocks
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Nko Custom Block Builder – Lazy Blocks: 1 registro(s), com versões afetadas e correções.
CVE-2026-1560
Alta · 8.8
CWE-94 11/02/2026
Custom Block Builder – Lazy Blocks <= 4.2.0 - Authenticated (Contributor+) Remote Code Execution
The Custom Block Builder – Lazy Blocks plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.0 via multiple functions in the 'LazyBlocks_Blocks' class. This makes it possible for authenticated attackers, with Contributor-level access and above, to execute code on the server.