PT-2025-24335 · Christiaan Pieterse · Maxiblocks

Annn · Published 2025-06-07 · Updated 2025-06-12 · CVE-2025-47601

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MaxiBlocks versions 2.1.0 and earlier

Description The issue is related to a Missing Authorization vulnerability, which allows Privilege Escalation. This vulnerability is due to missing authorization in Christiaan Pieterse MaxiBlocks.

Recommendations For MaxiBlocks versions 2.1.0 and earlier, update to a version that includes the fix for this issue as soon as possible. As a temporary workaround, consider restricting access to sensitive areas of the application to minimize the risk of exploitation.

Fix

LPE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-47601

Affected Products

Maxiblocks

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-47601 · Security Note
• https://twitter.com/CVEnew/status/1931223337600246028 · Twitter Post
• https://t.me/latest_high_impact_cve/2570 · Telegram Post
• https://twitter.com/cracbot/status/1933117115101298845 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/maxi-blocks/vulnerability/wordpress-maxiblocks-plugin-2-1-0-arbitrary-option-update-to-privilege-escalation-vulnerability?_s_id=cve · Note
• https://t.me/cvetracker/25682 · Telegram Post
• https://t.me/cvenotify/124986 · Telegram Post
• https://twitter.com/offseq/status/1931214570384724126 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/maxi-blocks/vulnerability/wordpress-maxiblocks-plugin-2-1-0-arbitrary-option-update-to-privilege-escalation-vulnerability?_s_id=cve · Note