https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 21:35:46 +0000 https://cve.radiocsirt.org/vuln/cve-2026-2028 <p><strong>Affected:</strong> ckp267 MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons &amp; Starter Sites</p> <p>The MaxiBlocks Builder plugin for WordPress is vulnerable to arbitrary media file deletion due to insufficient file ownership validation on the &#39;maxi_remove_custom_image_size&#39; AJAX action in all versions up to, and including, 2.1.8. This makes it possible for authenticated attackers, with Author-level access and above, to delete arbitrary files in the wp-content/uploads directory, including files uploaded by other users and administrators.</p> <p><strong>Affected:</strong> ckp267 MaxiBlocks Builder | 17,000+ Design Assets, Patterns, Icons &amp; Starter Sites</p> <p>The MaxiBlocks Builder plugin for WordPress is vulnerable to arbitrary media file deletion due to insufficient file ownership validation on the &#39;maxi_remove_custom_image_size&#39; AJAX action in all versions up to, and including, 2.1.8. This makes it possible for authenticated attackers, with Author-level access and above, to delete arbitrary files in the wp-content/uploads directory, including files uploaded by other users and administrators.</p> https://cve.radiocsirt.org/vuln/cve-2026-2028