VK Blocks WordPress Plugin Sensitive Information Exposure Vulnerability

A vulnerability allowing sensitive information exposure has been identified in the VK Blocks plugin for WordPress, affecting all versions through 1.94.2.2. The issue arises in the page content block, where authenticated attackers with Contributor-level access or higher can access sensitive data, including the contents of private posts and pages.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, specifically the content of private posts and pages.

Remediation

Users are advised to update the VK Blocks plugin to version 1.95.0.3 or later.