Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites — Vulnerabilities & Security Advisories 3

All 3 CVE vulnerabilities found in MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites, with AI-generated Chinese analysis, references, and POCs.

Vendor: ckp267

CVE IDTitleCVSSSeverityPublished
CVE-2026-6378 Maxi Blocks <= 2.1.9 - Authenticated (Author+) Stored Cross-Site Scripting via Style Card REST API CWE-79 6.4 Medium2026-05-02
CVE-2026-2028 Maxi Blocks <= 2.1.8 - Missing Authorization to Authenticated (Author+) Media File Deletion via 'old_media_src' Parameter CWE-639 5.3 Medium2026-04-24
CVE-2024-6885 MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles <= 1.9.2 - Authenticated (Subscriber+) Arbitrary File Deletion CWE-22 8.1 High2024-07-23

All 3 known CVE vulnerabilities affecting MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites with full Chinese analysis, references, and POCs where available.