Not rated
CVE-2021-24677 The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow…
Description
The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Find My Blocks 3.4 | earliest → < 3.4.0 | 3.4.0 |