CVE-2024-13546

Summary

CVE-2024-13546 is a vulnerability affecting the GenerateBlocks plugin for WordPress. This issue allows authenticated attackers with Contributor-level access or higher to extract sensitive information. Specifically, they can access the content of private, draft, and scheduled posts and pages through the 'get_image_description' function. This poses a significant risk as attackers can gain unauthorized access to confidential information, potentially leading to data breaches or other malicious activities. Plugin versions up to and including 1.9.1 are affected, and it is recommended that users upgrade to the latest version to mitigate this exposure.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.