High 7.5
2025-06-09< 2.0.7.5
CVE-2025-48130
Minimum safe version
2.0.7.5
Update to 2.0.7.5 or later to address 2 fixable vulnerabilities
CVE-2025-48130
WordPress Spice Blocks plugin <= 2.0.7.7 - Broken Access Control vulnerability
WordPress Spice Blocks Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)