CVE-2026-102002

Name of the Vulnerable Software and Affected Versions Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE versions prior to 3.2.7

Description An issue exists that allows authenticated attackers with subscriber-level access and above to expose sensitive information. By utilizing the otter form widget filter parameter, an attacker can extract the email addresses of the five most recent form submitters, their submission dates, and the total count of form submissions for the site. This exposure occurs when the themeisle blocks form emails option is non-empty, which is the standard state after a Form block has been saved.

Recommendations Update Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE to version 3.2.7 or later.