Custom Block Builder – Lazy Blocks vulnerabilities

1 known vulnerability in Custom Block Builder – Lazy Blocks from Nko. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Custom Block Builder – Lazy Blocks: Improper Control of Generation of Code

  CVE-2026-1560Feb 11, 2026NkoEPSS 10.4%

  The Custom Block Builder – Lazy Blocks plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.0 via multiple functions in the 'LazyBlocks_Blocks' class. This makes it possible for authenticated attackers, with Con