CVE-2026-118801

The aBlocks plugin for WordPress (versions up to and including 2.18.0 ) is vulnerable to Sensitive Information Exposure via the id parameter in the ablocks_template shortcode. This flaw allows authenticated attackers with contributor-level access to extract the full rendered body content of any p...

CVE-2026-118801 aBlocks <= 2.18.0 - Authenticated (Contributor+) Sensitive Information Exposure in 'ablocks_template' Shortcode

The aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.18.0 via the 'id' parameter. This makes it possible for authenticated attackers, wit...

WordPress aBlocks – Gutenberg Blocks, User Dashboard Builder, Popup Builder, Form Builder & Animation Builder plugin <= 2.18.0 - Authenticated (Contributor+) Sensitive Information Exposure in 'ablocks_template' Shortcode vulnerability

Authenticated Contributor+ Sensitive Information Exposure in 'ablockstemplate' Shortcode vulnerability discovered by Wordfence PRISM in WordPress Plugin aBlocks versions = 2.18.0...