The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The GenerateBlocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_option_rest' function in all versions up to, and including, 2.1.1. This makes it possible for authenticated attackers, with contributor level access and above, to read arbitrary WordPress options, including sensitive information such as SMTP credentials, API keys, and other data stored by other plugins.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Generateblocks Plugin | — | Update generateblocks plugin to version 2.1.2, or a newer patched version | Oct 27, 2025 | Oct 24, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub