What’s Vulnerable › Products

ckp267 MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your ckp267 MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites version is affected

Latest ckp267 MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons & Starter Sites vulnerabilities

• CVE-2026-6378 — Maxi Blocks <= 2.1.9 - Authenticated (Author+) Stored Cross-Site Scripting via Style Card REST API (CVSS 6.4)
• CVE-2026-2028 — Maxi Blocks <= 2.1.8 - Missing Authorization to Authenticated (Author+) Media File Deletion via 'old_media_src' Parameter (CVSS 5.3)
• CVE-2024-6885 — MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles <= 1.9.2 - Authenticated (Subscriber+) Arbitrary File Deletion (CVSS 8.1)