WordPress Document Embedder plugin title enumeration vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. Document Embedder WordPress plugin prior to version 1.7.9 is vulnerable to a title enumeration vulnerability, which stems from the fact that the plugin includes an AJAX operation endpoint that can be...

CVE-2021-24775

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts...

CVE-2021-24868

The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts...

CVE-2021-24868

The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts...

CVE-2021-24775

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts...

CVE-2021-24868

The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts...

Design/Logic Flaw

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts...

CVE-2021-24775 Document Embedder < 1.7.5 - Unauthenticated Arbitrary Private/Draft Post Title Disclosure

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts...

PT-2022-9462

Name of the Vulnerable Software and Affected Versions Document Embedder WordPress plugin versions prior to 1.7.5 Description The issue allows unauthenticated users to enumerate the title of arbitrary private and draft posts through a REST endpoint. Recommendations For versions prior to 1.7.5,...

WordPress security vulnerabilities

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. Document Embedder WordPress plugin prior to version 1.7.9 is vulnerable to a title enumeration vulnerability, which stems from the fact that the plugin includes an AJAX operation endpoint that can be...

WordPress security vulnerabilities

WordPress is a set of blogging platforms developed by the Wordpress Foundation using the PHP language. WordPress plugin is an application plugin for WordPress. WordPress Document Embedder plugin versions prior to 1.7.5 contain an information disclosure vulnerability that could be exploited to all...

PT-2022-9487

Name of the Vulnerable Software and Affected Versions Document Embedder WordPress plugin versions prior to 1.7.9 Description The issue allows any authenticated user to enumerate the title of arbitrary private and draft posts through an AJAX action endpoint. Recommendations For versions prior to...

CVE-2021-24775: Exposure of Resource to Wrong Sphere

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts...

CVE-2021-24733

The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally...

PT-2022-9455

Name of the Vulnerable Software and Affected Versions WP Post Page Clone WordPress plugin versions prior to 1.2 Description The issue allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts, which they cannot view normally. Recommendations...

CVE-2021-24733: Incorrect Authorization

The WP Post Page Clone WordPress plugin before 1.2 allows users with a role as low as Contributor to clone and view other users' draft and password-protected posts which they cannot view normally...

CVE-2021-24948

The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tpgetdlpostinfoajax AJAX action, which could allow unauthenticated users to retrieve sensitive information, such as private and draft posts...

CVE-2021-24948

The Plus Addons for Elementor - Pro WordPress plugin before 5.0.7 does not validate the qvquery parameter of the tpgetdlpostinfoajax AJAX action, which could allow unauthenticated users to retrieve sensitive information, such as private and draft posts...

@epam/draft-rte (>=4.0.0--beta.10.0, <=5.7.4), @epam/edu-core-routing (>=3.48.0-beta.1, <=4.6.2-select-all-fix.1) +20 more potentially affected by CVE-2020-28500 via lodash.trimend (>=4.5.0, <=4.5.1)

lodash.trimend NPM version =4.5.0, =4.0.0--beta.10.0, =3.48.0-beta.1, =5.3.0-rc.0, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =4.6.0-alpha.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =3.48.0-beta.1, =5.0.0-alpha.2, =3.48.0-beta.1, =5.0.0-alpha.0, =5.6.23 and more Sourc...

WordPress Document Embedder plugin <= 1.7.6 - Arbitrary Private/Draft Post Title Disclosure vulnerability

Arbitrary Private/Draft Post Title Disclosure vulnerability discovered by apple502j in WordPress Document Embedder plugin versions = 1.7.6. Solution Update the WordPress Document Embedder plugin to the latest available version at least 1.7.8...