PT-2025-10077
CVE-2024-13635
·
Published
2025-03-06
·
Updated
2025-03-08
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
VK Blocks plugin for WordPress versions up to, and including, 1.94.2.2
Description
The issue allows authenticated attackers with Contributor-level access and above to extract sensitive data, including the content of private posts and pages, via the page content block.
Recommendations
For VK Blocks plugin for WordPress versions up to, and including, 1.94.2.2, update to a version that contains a fix for this issue to prevent sensitive information exposure.
Found an issue in the description? Have something to add? Feel free to write us 👾