CVE-2026-75017

The Magazine Blocks – Blog Designer, Magazine & Newspaper Website Builder, Page Builder with Posts Blocks, Post Grid plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.8.6. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for authenticated attackers, with contributor-level access and above, to demote administrator-owned published builder templates (header, footer, front page, single, archive, 404, and search) to draft status and replace them with attacker-authored block content rendered site-wide, enabling defacement, phishing, and SEO spam. This is possible because the mzb-builder-template post type is registered with capability_type='post' and exposed via the REST API, and the _mzb_template meta key is accessible to any user with edit_posts capability, meaning Contributor-level users and above can trigger the vulnerable save_post() hook.

• CWE-862

• https://plugins.trac.wordpress.org/browser/magazine-blocks/tags/1.8.6/includes/MagazineBlocks.php#L98
• https://plugins.trac.wordpress.org/browser/magazine-blocks/tags/1.8.6/includes/PostTypes/SiteBuilder.php#L116
• https://plugins.trac.wordpress.org/browser/magazine-blocks/tags/1.8.6/includes/PostTypes/SiteBuilder.php#L138
• https://plugins.trac.wordpress.org/browser/magazine-blocks/tags/1.8.6/includes/PostTypes/SiteBuilder.php#L56
• https://plugins.trac.wordpress.org/changeset?reponame=&old=3656574%40magazine-blocks&new=3656574%40magazine-blocks
• https://www.wordfence.com/threat-intel/vulnerabilities/id/7f66d26a-8eb7-4b29-bb7f-afdd762be4b2?source=cve

Published

Sep 18, 2026

Last Modified

Sep 18, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-75011A flaw has been found in kylecui NetForensicMCP 2.1.0. Impac…6.3
• CVE-2026-75012A security vulnerability has been detected in TOTOLINK EX120…6.5
• CVE-2026-75013A vulnerability was detected in TOTOLINK EX1200L 9.3.5u.6146…6.5
• CVE-2026-75014A flaw has been found in SourceCodester Pet Grooming Managem…7.3
• CVE-2026-75015Insufficiently Protected Credentials vulnerability in Apache…4.9
• CVE-2026-75016The Magazine Blocks plugin for WordPress is vulnerable to St…6.4
• CVE-2026-75018The Custom Contact Forms plugin for WordPress is vulnerable …4.3
• CVE-2026-75019The Cozy Blocks – Page Builder for Gutenberg Editor & FSE wi…6.4
• CVE-2026-7502A security vulnerability has been detected in LinkStackOrg L…5.4
• CVE-2026-75020Improper Neutralization of Special Elements used in an LDAP …8.1
• CVE-2026-75021fastify-cli starts the Node.js Inspector when a debug flag i…8.1
• CVE-2026-75025Mattermost Desktop App versions <=6.2 6.2.2.0 Fixed an issue…4.7