PT-2022-9487

Name of the Vulnerable Software and Affected Versions Document Embedder WordPress plugin versions prior to 1.7.9 Description The issue allows any authenticated user to enumerate the title of arbitrary private and draft posts through an AJAX action endpoint. Recommendations For versions prior to...

CVE-2021-24775: Exposure of Resource to Wrong Sphere

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts...

PT-2021-16188

Name of the Vulnerable Software and Affected Versions Find My Blocks WordPress plugin versions prior to 3.4.0 Description The issue concerns a lack of authorization checks in the REST API of the Find My Blocks WordPress plugin. This could allow unauthenticated users to enumerate private posts'...