Description (CNA)
The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Find My Blocks | affected 3.4.0 before 3.4.0 |
CWE
CWE-862
References
ADP enrichment
No English description supplied.