medium5.3
CVE-2021-24677
The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate priva…
Impact
The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Find My Blocks Project | Find My Blocks | before 3.4.0 |