generateblocks

WordPress · Plugin

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
GenerateBlocks <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Tag Injection in HTML AttributesCVE-2026-13458	generateblocks	WordPress	Medium	Fix reported	2026-08-01
GenerateBlocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Headline Block 'linkMetaFieldType' Dynamic Link AttributeCVE-2026-9756	generateblocks	WordPress	Medium	Fix reported	2026-07-03
GenerateBlocks <= 2.1.0 - Authenticated (Contributor+) Information DisclosureCVE-2026-48877	generateblocks	WordPress	Medium	Fix reported	2026-06-02
GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag ReplacementsCVE-2026-3454	generateblocks	WordPress	Medium	Fix reported	2026-05-05
GenerateBlocks <= 2.1.2 - Authenticated (Contributor+) Information Exposure via MetadataCVE-2025-12512	generateblocks	WordPress	Medium	Fix reported	2025-12-13
GenerateBlocks <= 2.1.1 - Improper Authorization to Authenticated (Contributor+) Arbitrary Options DisclosureCVE-2025-11879	generateblocks	WordPress	Medium	Fix reported	2025-10-25
GenerateBlocks <= 1.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via 'get_image_description'CVE-2024-13546	generateblocks	WordPress	Medium	Fix reported	2025-03-01
GenerateBlocks <= 1.8.2 - Sensitive Information ExposureCVE-2024-1452	generateblocks	WordPress	Medium	Fix reported	2024-03-13
GenerateBlocks <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2021-24751	generateblocks	WordPress	Medium	Fix reported	2024-01-22