PT-2026-34842

The MaxiBlocks Builder plugin for WordPress is vulnerable to arbitrary media file deletion due to insufficient file ownership validation on the 'maxi remove custom image size' AJAX action in all versions up to, and including, 2.1.8. This makes it possible for authenticated attackers, with...

PT-2024-37927

Name of the Vulnerable Software and Affected Versions The MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles plugin for WordPress versions up to, and including, 1.9.2 Description The issue is related to insufficient file path validation in the maxi remove custom image size and maxi a...