EUVD-2021-11780

Malware in sbrugna...

PT-2022-9487

Name of the Vulnerable Software and Affected Versions Document Embedder WordPress plugin versions prior to 1.7.9 Description The issue allows any authenticated user to enumerate the title of arbitrary private and draft posts through an AJAX action endpoint. Recommendations For versions prior to...

CVE-2021-24868: Exposure of Resource to Wrong Sphere

The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts...