spicethemes Spice Blocks

• CVE-2025-48130 High 7.5 WordPress Spice Blocks plugin <= 2.0.7.4 - Arbitrary File Download vulnerability 0.5%
• CVE-2025-39532 High 7.5 WordPress Spice Blocks plugin <= 2.0.7.7 - Broken Access Control vulnerability 0.4%