https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-24T08:29:35.646796+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-109935 CVE-2026-109935 — Otter Blocks < 3.2.8 - Unauthenticated Restricted Block Content Disclosure via REST API 2026-10-24T08:29:35.664238+00:00

Affected: Unknown Otter Blocks

The Otter Blocks WordPress plugin before 3.2.8 does not enforce its block visibility conditions when a published post is rendered through the WordPress REST API, allowing unauthenticated users to read block content that the site owner restricted to specific roles, logged-in users, the post author, categories or tags, or (on the Pro tier) Stripe purchasers.