Access Control Flaw in MaxiBlocks by Christiaan Pieterse
CVE-2025-58968

5MEDIUM

Key Information:

Vendor

WordPress
Status
Maxiblocks
Vendor
CVE Published:
22 September 2025

What is CVE-2025-58968?

An access control vulnerability in the MaxiBlocks plugin developed by Christiaan Pieterse allows attackers to exploit incorrectly configured access control settings. This misconfiguration can lead to unauthorized access, enabling potential manipulation of content or functions within the affected versions, specifically from n/a through 2.1.3. It's crucial for users of the plugin to review their settings and apply appropriate security measures.

Affected Version(s)

MaxiBlocks <= 2.1.3

References

https://patchstack.com/database/wordpress/plugin/maxi-blo...
vdb-entry

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Abu Hurayra (Patchstack Alliance)
.
CVE-2025-58968 : Access Control Flaw in MaxiBlocks by Christiaan Pieterse