CVE-2024-13546

Name of the Vulnerable Software and Affected Versions GenerateBlocks plugin for WordPress versions prior to 1.9.2

Description The issue allows authenticated attackers with Contributor-level access and above to extract sensitive data, including the content of private, draft, and scheduled posts and pages, via the get image description function.

Recommendations For versions prior to 1.9.2, update to version 1.9.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the get image description function until a patch is available.