GenerateBlocks WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure exists in the GenerateBlocks plugin for WordPress, affecting all versions through 1.9.1. The issue arises in the 'get_image_description' function, where authenticated attackers with Contributor-level access or higher can access sensitive data, including the contents of private, draft, and scheduled posts and pages.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, specifically the content of private, draft, and scheduled posts and pages.

Remediation

Users can update to version 2.0.0 or a newer patched version to address this vulnerability.