CVE-2021-24677CWE-862

Find My Blocks < 3.4.0 - Private Post Titles Disclosure

published October 18, 2021

CVSS
—
EPSS
1%
Percentile
69.2
In the wild
Unconfirmed
What it is

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01252 · 69.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2021-10-18T13:45Z
EPSS history
Timeline
  • 18 OCT 13:45Z
    Find My Blocks < 3.4.0 - Private Post Titles Disclosure
    cvelistv5