CVE-2025-50034

{"id": "CVE-2025-50034", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "audit@patchstack.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2025-06-20T15:15:29.533", "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/enhanced-blocks/vulnerability/wordpress-enhanced-blocks-page-builder-blocks-for-gutenberg-plugin-1-4-1-broken-access-control-vulnerability?_s_id=cve", "source": "audit@patchstack.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in Mahmudul Hasan Arif Enhanced Blocks \u2013 Page Builder Blocks for Gutenberg enhanced-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Enhanced Blocks \u2013 Page Builder Blocks for Gutenberg: from n/a through <= 1.4.1."}, {"lang": "es", "value": "La vulnerabilidad de falta de autorizaci\u00f3n en Mahmudul Hasan Arif Enhanced Blocks \u2013 Page Builder Blocks for Gutenberg permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a los Bloques Mejorados (Bloques del Constructor de P\u00e1ginas para Gutenberg) desde n/d hasta la versi\u00f3n 1.4.1."}], "lastModified": "2026-04-28T19:33:20.947", "sourceIdentifier": "audit@patchstack.com"}