Spice Blocks vulnerabilities

2 known vulnerabilities in Spice Blocks from Spicethemes. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Spice Blocks: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-48130Jun 9, 2025Spicethemes

  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spicethemes Spice Blocks spice-blocks allows Path Traversal.This issue affects Spice Blocks: from n/a through <= 2.0.7.4.

• 7.5 High severity

  Spice Blocks: Missing Authorization

  CVE-2025-39532Apr 17, 2025Spicethemes

  Missing Authorization vulnerability in spicethemes Spice Blocks spice-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spice Blocks: from n/a through <= 2.0.7.7.