Vendor archive

find_my_blocks_project CVEs

Beta · best-effort

1 CVEs tagged to vendor find_my_blocks_project — 0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2021-24677

Published Oct 18, 2021

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-1 of 1 CVEsPage 1 of 1