Skip to content
Sign in
7.5 High

CVE-2025-39532 Missing Authorization vulnerability in spicethemes Spice Blocks spice-blocks allows Exploiting Incorrectly Configured…

Description

Missing Authorization vulnerability in spicethemes Spice Blocks spice-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spice Blocks: from n/a through <= 2.0.7.7.

Affected products and versions

Product Affected versions Fixed in
Spice Blocks 2.0 earliest → 2.0.7.7 No fix stated

Other CVEs of Spice Blocks

The 2 CVEs of Spice Blocks →
CVE-2025-48130 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spicethemes Spice Blocks… 7.5 High
Track this CVE