Search vulnerabilities

Results 1

Export CSV
CVE-2021-24677

Find My Blocks < 3.4.0 - Private Post Titles Disclosure

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.

CVSS 3.1 · 5.3 Medium EPSS 1.3% KEV · Not listed
Products