What is CVE-2025-11879?

CVE-2025-11879 is a medium-severity vulnerability in Edge22 Generateblocks, classified under Improper Authorization. CVSS score: 6.5/10. Published 2025-10-25.

How severe is CVE-2025-11879?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Edge22 Generateblocks

CVE-2025-11879

The GenerateBlocks plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_option_rest' function in all versions up to, and including, 2.1.1. This makes it possible for authenticated attackers, with contributor level access and above, to read arbitrary WordPress options, including sensitive information such as SMTP credentials, API keys, and other data stored by other plugins.

EPSS: 0.003 (19.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Edge22 Generateblocks — versions 0

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

Frequently asked questions

What is CVE-2025-11879?: CVE-2025-11879 is a medium-severity vulnerability in Edge22 Generateblocks, classified under Improper Authorization. CVSS score: 6.5/10. Published 2025-10-25.
How severe is CVE-2025-11879?: Medium severity. CVSS v3 base score is 6.5 out of 10.