Lucene search
+L

9 matches found

OSV
OSV
•added 2021/10/18 2:15 p.m.•11 views

CVE-2021-24677

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...

5.3CVSS5.8AI score0.01252EPSS
SaveExploits2References1
NVD
NVD
•added 2021/10/18 2:15 p.m.•23 views

CVE-2021-24677

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...

5.3CVSS0.01252EPSS
SaveExploits2References1
Prion
Prion
•added 2021/10/18 2:15 p.m.•21 views

Design/Logic Flaw

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...

5CVSS5.3AI score0.01252EPSS
SaveExploits2References1Affected Software1
attackerkb
attackerkb
•added 2021/10/18 2:15 p.m.•7 views

CVE-2021-24677

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...

5.3CVSS6.1AI score0.01252EPSS
SaveExploits2References2
Cvelist
Cvelist
•added 2021/10/18 1:45 p.m.•31 views

CVE-2021-24677 Find My Blocks < 3.4.0 - Private Post Titles Disclosure

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...

5.6AI score0.01252EPSS
SaveExploits2References1
CVE
CVE
•added 2021/10/18 1:45 p.m.•97 views

CVE-2021-24677

The CVE concerns the WordPress plugin Find My Blocks prior to version 3.4.0, where the REST API lacks authorization checks. This allows unauthenticated users to enumerate titles of private posts via the plugin’s REST endpoints (e.g., private post title disclosure). Impact is limited to affected s...

5.3CVSS5.2AI score0.01252EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/18 12:00 a.m.•5 views

CVE-2021-24677: Missing Authorization

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles...

5.3CVSS5.8AI score0.01252EPSS
SaveExploits2References3
CNNVD
CNNVD
•added 2021/10/18 12:00 a.m.•11 views

WordPress 访问控制错误漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An Access Control Error vulnerability exists in the Find My Blocks plugin for WordPress, versions...

5.3CVSS5.8AI score0.01252EPSS
SaveExploits2References2
Patchstack
Patchstack
•added 2021/09/15 12:00 a.m.•24 views

WordPress Find My Blocks plugin <= 3.3.2 - Private Post Titles Disclosure vulnerability

Private Post Titles Disclosure vulnerability discovered by apple502j in WordPress Find My Blocks plugin versions = 3.3.2. Solution Update the WordPress Find My Blocks plugin to the latest available version at least 3.4.0...

5.3CVSS2.4AI score0.01252EPSS
SaveExploits2References3Affected Software1
Rows per page
Query Builder