CVE-2021-24775

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts.

Score

CVSS 3.1 5.3 Medium

Status

Modified - contact@wpscan.com

Published

2022-02-01

Last modified

2024-08-03

Weaknesses

CWE-668

Affected products

• Document Embedder (Bplugins)

References

• https://wpscan.com/vulnerability/c6f24afe-d273-4f87-83ca-a791a385b06b