← CVE Intelligence

CVE-2021-24868

Document Embedder < 1.7.9 - Subscriber+ Arbitrary Private/Draft Post Title Disclosure PUBLISHED

Description (CNA)

The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts.

Affected (CNA)

Vendor / productVersions
n/a / n/aaffected n/a

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.