CVE-2026-62036
MediumCVSS 4.3Summary
The All Bootstrap Blocks WordPress plugin up to version 1.3.31 exposes sensitive system information to unauthorized control spheres. Attackers can exploit this to retrieve embedded sensitive data.
Risk Assessment
The organization may suffer internal data leakage, leading to confidentiality breaches and potential attack escalation.
Recommendation
Update the All Bootstrap Blocks plugin to the latest available version that includes a security fix.
Other vulnerabilities in All Bootstrap Blocks
See all- CVE-2026-88993Medium
The All Bootstrap Blocks WordPress plugin through 1.3.31 does not properly escape a block attribute before outputting it in HTML tag-name position, allowing users with Contributor-level access and above to inject arbitrary web scripts that execute when the affected content is viewed.
- CVE-2025-54733Medium
The All Bootstrap Blocks plugin up to version 1.3.28 has a Missing Authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. Attackers can exploit this to perform unauthorized actions.
Original NVD description (English source)
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in AREOI All Bootstrap Blocks all-bootstrap-blocks allows Retrieve Embedded Sensitive Data.This issue affects All Bootstrap Blocks: from n/a through 1.3.31.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS