CVE-2021-24677
Published Oct 18, 2021The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.
Vendor/product archive
1 CVEs tagged to find_my_blocks_project / find_my_blocks — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.
The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.