GenerateBlocks, CVE-2024-13546

CVE, Research URL: CVE-2024-13546
Home page URL: Security reports for GenerateBlocks
Application: GenerateBlocks
Published on: Mar 01, 2025
Research Description: The GenerateBlocks plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.9.1 via the 'get_image_description' function. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the content of private, draft, and scheduled posts and pages.
Affected versions: max 2.0.0.
Status: vulnerable