CVE-2026-127048

The Custom Block Builder WordPress plugin before version 3.0.0 contains a vulnerability where it fails to properly deny unauthorized requests to its REST routes . Because permission checks return a non-error response, WordPress treats the access as granted. This allows unauthenticated users to pe...