This vulnerability, identified as CWE-201 (Insertion of Sensitive Information Into Sent Data), affects Gutenberg Blocks by Kadence Blocks up to version 3.7.8. It allows sensitive contributor data to be inserted into data sent by the application, potentially exposing this information to unauthorized parties. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable with low attack complexity, requires low privileges, and does not require user interaction. The impact is limited to confidentiality with no integrity or availability impact. There is no known exploit in the wild and no vendor advisory or patch information is currently available.

The vulnerability may lead to the unintended exposure of sensitive contributor information, potentially compromising confidentiality. There is no indication of impact on data integrity or system availability. The attack requires network access and low privileges but no user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific mitigations are provided in the available data.