CVE-2025-11879

Name of the Vulnerable Software and Affected Versions GenerateBlocks plugin for WordPress versions through 2.1.1

Description The GenerateBlocks plugin for WordPress has a flaw that allows unauthorized access to data. This is due to a missing capability check within the get option rest function. Authenticated attackers with contributor-level access or higher can read arbitrary WordPress options. This includes sensitive information such as SMTP credentials and API keys stored by other plugins.

Recommendations Update the GenerateBlocks plugin to a version later than 2.1.1.