CVE-2021-24677
Find My Blocks < 3.4.0 - Private Post Titles Disclosure
The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.
CVSS 3.1 · 5.3 Medium
EPSS 1.3%
KEV · Not listed
Vendors
Products