Medium 6.3
2024-10-16< 3.0.5
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Minimum safe version
3.1.11
Update to 3.1.11 or later to address 6 fixable vulnerabilities
Freemius SDK <= 2.4.2 - Missing Authorization Checks
CVE-2024-9616
WordPress BlockMeister – Block Pattern Builder Plugin < 3.1.10 is vulnerable to Cross Site Scripting (XSS)
Freemius SDK <= 2.4.2 - Missing Authorization Checks
WordPress BlockMeister – Block Pattern Builder plugin < 3.0.5 - Sensitive Information Disclosure vulnerability
WordPress BlockMeister – Block Pattern Builder plugin < 3.0.5 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability