CVE-2026-48877 - WordPress GenerateBlocks plugin <= 2.1.0 - Sensitive Data Exposure vulnerability

MEDIUM

WordPress GenerateBlocks plugin <= 2.1.0 - Sensitive Data Exposure vulnerability

Published May 27, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.37%

Insertion of Sensitive Information Into Sent Data vulnerability in Tom GenerateBlocks allows Retrieve Embedded Sensitive Data.

This issue affects GenerateBlocks: from n/a through 2.1.0.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

unaffected

Version	Status	Constraints
-	affected	<=2.1.0

Vendor solution

Update the WordPress GenerateBlocks plugin to the latest available version (at least 2.1.1).

Weaknesses (1)

CWE-201

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-32154		Advisory
https://patchstack.com/database/wordpress/plugin/generateblocks/vulnerability/wordpress-generateblocks-plugin-2-1-0-sensitive-data-exposure-vulnerability?_s_id=cve		vdb-entry