GenerateBlocks

GenerateBlocks has 9 disclosed vulnerabilities in the WordSec catalog, reported between 2021 and 2026; all 9 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 6.5 out of 10. 2026 was the busiest year with 4 disclosures.

The most common weakness is Cross-Site Scripting, behind 3 of the records (33%). Other recurring categories include Exposure Of Sensitive Information To An Unauthorized Actor, Authorization Bypass Through User-Controlled Key.

Every one of the 9 issues recorded for GenerateBlocks has a vendor fix available, so running the current release closes all known holes.

9 independent researchers contributed these findings, one record each. GenerateBlocks is installed on roughly 200,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all GenerateBlocks vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.5CVE-2026-3454

GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements

Read the full analysis

Vulnerability Records

9 records


2026-07-31 19:29	GenerateBlocks <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes GenerateBlocks <= 2.3.0	`CVE-2026-13458`	6.4 Medium	Or Benit	Yes
2026-07-02 00:00	GenerateBlocks <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Headline Block 'linkMetaFieldType' Dynamic Link Attribute GenerateBlocks <= 2.2.1	`CVE-2026-9756`	6.4 Medium	alex_henry20	Yes
2026-05-27 00:00	GenerateBlocks <= 2.1.0 - Authenticated (Contributor+) Information Disclosure GenerateBlocks <= 2.1.0	`CVE-2026-48877`	4.3 Medium	Abu Hurayra (HurayraIIT)	Yes
2026-05-04 17:58	GenerateBlocks <= 2.2.0 - Insecure Direct Object Reference to Authenticated (Contributor+) Sensitive Information Exposure via Dynamic Tag Replacements GenerateBlocks <= 2.2.0	`CVE-2026-3454`	6.5 Medium	kai63001	Yes
2025-12-12 14:28	GenerateBlocks <= 2.1.2 - Authenticated (Contributor+) Information Exposure via Metadata GenerateBlocks <= 2.1.2	`CVE-2025-12512`	4.3 Medium	Athiwat Tiprasaharn (Jitlada)	Yes
2025-10-24 00:00	GenerateBlocks <= 2.1.1 - Improper Authorization to Authenticated (Contributor+) Arbitrary Options Disclosure GenerateBlocks <= 2.1.1	`CVE-2025-11879`	6.5 Medium	Lucas Montes (NiRoX)	Yes
2025-02-28 00:00	GenerateBlocks <= 1.9.1 - Authenticated (Contributor+) Sensitive Information Exposure via 'get_image_description' GenerateBlocks <= 1.9.1	`CVE-2024-13546`	4.3 Medium	Nishiv	Yes
2024-03-01 00:00	GenerateBlocks <= 1.8.2 - Sensitive Information Exposure GenerateBlocks <= 1.8.2	`CVE-2024-1452`	4.3 Medium	Webbernaut	Yes
2021-11-01 00:00	GenerateBlocks <= 1.3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting GenerateBlocks <= 1.3.5	`CVE-2021-24751`	6.4 Medium	apple502j	Yes

Showing 1–9 of 9 reports

Latestv2.4.1

GenerateBlocks

Author

Tom

4.9(122)

98/100

Last Updated

2026-08-18 (25d ago)

Active Installs

200,000+

Downloads

3,817,205

Requires WP

6.7+

Requires PHP

7.2+

Tested up to

WP 7.1

Created

2020-05-19 (6y ago)

Add incredible versatility to your editor without bloating it with tons of one-dimensional blocks. With GenerateBlocks, you can learn a handful of blocks deeply and use them to build anything. GenerateBlocks works hand-in-hand with GeneratePress, but is built to work with any theme. Looking for more features? Check out GenerateBlocks Pro. Container Organize your content into rows and sections. The Container block is the foundation of your content, allowing you to design unique sections for your content. Grid Create advanced layouts with flexible grids. The Grid block gives you the ability to create any kind of layout you can imagine. Text Craft text-rich content with advanced typography. Everything from headings to paragraphs – take full control of your text. Button Drive conversions with beautiful buttons. Query Build a list of posts from any post type using advanced query parameters. Query post meta and option fields in GenerateBlocks Pro. Image Add images to your content to make a visual statement. Shape Add custom SVG shapes to your pages with ease. Dynamic Tags Use our powerful dynamic tags to display dynamic content inside your blocks. Post title Post excerpt Post permalink Post date Featured image Post meta Author meta Comment count Comments URL Author archives URL Author avatar URL Term list Previous posts URL Next posts URL Media In GenerateBlocks Pro, you get additional dynamic tags: Archive title Archive description Site option Term meta User meta Current year Site title Site tagline Loop index number Loop item Performance We take performance seriously. Minimal CSS is generated only for the blocks you need, and our HTML structure is as simple as possible while allowing for maximum flexibility. Coding standards Built to the highest coding standards for security, stability and future compatibility. Fully responsive Style your blocks for different screen sizes. Desktop: @media (min-width:1025px) Desktop & Tablet: @media (min-width:768px) Tablet: @media (max-width:1024px) and (min-width:768px) Tablet & Mobile: @media (max-width:1024px) Mobile: @media (max-width:767px) In GenerateBlocks Pro, you can create as many custom media queries as you need. Documentation Check out our documentation for more information on the individual blocks and how to use them.

View on WordPress.org