0.001 Low
EPSS
Percentile
45.9%
The plugin contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts.
https://example.com/wp-json/doc/v1/single/509 (509 being the ID of a private/draft Post)