CVE-2026-17011

The vulnerability CVE-2026-17011 affects the Nexter Blocks WordPress plugin prior to version 5.0.2. The root cause is that the REST endpoint used to save global CSS does not restrict who can perform the action, allowing users with at least the Contributor role to store arbitrary CSS. This CSS is ...