lottiefile

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

lottiefile records in CISA KEV

No lottiefile vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-00506 CVE-2026-0717 · GHSA-9qp2-65pm-rg85

LottieFiles – Lottie block for Gutenberg <= 3.0.0 - Unauthenticated Sensitive Information Exposure

LOW 32

The LottieFiles – Lottie block for Gutenberg plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.0 via the `/wp-json/lottiefiles/v1/settings/` REST API endpoint.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0093 Published 2026-01-14 No fix listed CWE-200

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0