WordPress security by component
GenerateBlocks
Plugin description
GenerateBlocks is a WordPress component with 8 published CVE records in this archive. The latest tracked vulnerability was published Jul 03, 2026; the highest CVE/CNA score is 6.5.
Plugin slug:
generateblocksLatest vulnerability
CVE-2026-9756: GenerateBlocks: Cross-site scripting
GenerateBlocks is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.2.1.
| Safe version |
|
||
|---|---|---|---|
| Jul 03, 2026 |
CVE-2026-9756
GenerateBlocks: Cross-site scripting
GenerateBlocks is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed. The published affected range is <= 2.2.1.
|
> 2.2.1 |
CVE6.4
NVDPending
|
| May 27, 2026 |
CVE-2026-48877
GenerateBlocks: A security weakness
GenerateBlocks is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 2.1.0.
|
2.1.1 |
CVE6.5
NVDPending
|
| May 05, 2026 |
CVE-2026-3454
GenerateBlocks: A security weakness
GenerateBlocks is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 2.2.0.
|
> 2.2.0 |
CVE6.5
NVDPending
|
| Dec 13, 2025 |
CVE-2025-12512
GenerateBlocks: Privilege escalation or authentication bypass
GenerateBlocks is affected by privilege escalation or authentication bypass. Exploitation requires at least contributor-level access. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Oct 25, 2025 |
CVE-2025-11879
GenerateBlocks: A security weakness
GenerateBlocks is affected by a security weakness. Exploitation requires at least contributor-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Mar 01, 2025 |
CVE-2024-13546
GenerateBlocks: Sensitive information exposure
GenerateBlocks is affected by sensitive information exposure. Exploitation requires at least contributor-level access. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Mar 13, 2024 |
CVE-2024-1452
GenerateBlocks: Sensitive information exposure
GenerateBlocks is affected by sensitive information exposure. Exploitation requires an authenticated WordPress account. Successful exploitation can disclose data that should not be available to the caller.
|
See mitigation notes |
CVE4.3
NVDPending
|
| Nov 29, 2021 |
CVE-2021-24751
GenerateBlocks: Cross-site scripting
GenerateBlocks is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.4
NVD5.4
|