Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to Information Disclosure
mediumThe Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the apbPosts() function hooked via an AJAX action in all versions up to, and including, 1.13.4. This makes it possible for unauthenticated a...
- CVSS:
- 5.3
- Affected:
- up to 1.13.4
- Fixed in:
- 1.13.5
- Disclosed:
- Apr 11, 2024