Find My Blocks Project: Security Vulnerabilities
The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.
CVSS Score
5.3
EPSS Score
0.005
Published
2021-10-18