Remote Code Execution Risk in Block Logic Plugin for WordPress
CVE-2025-2303
8.8HIGH
Key Information:
- Vendor
WordPress
- Vendor
- CVE Published:
- 22 March 2025
What is CVE-2025-2303?
The Block Logic plugin for WordPress is susceptible to remote code execution due to improper handling of user-supplied input within the block_logic_check_logic function. This vulnerability affects all versions up to and including 1.0.8, allowing authenticated attackers with Contributor-level access to execute arbitrary code on the server. Site administrators should take immediate precautions to mitigate this risk by updating to a secure version or applying necessary patches.
Affected Version(s)
Block Logic – Full Gutenberg Block Display Control * <= 1.0.8