plugin

Find My Blocks Vulnerabilities

1 known security issue reported for the Find My Blocks WordPress plugin. Most recent disclosed Sep 15, 2021.

1 medium

Running Find My Blocks on your site? Check whether your installed version is affected.

Find My Blocks < 3.4.0 - Sensitive Information Disclosure

medium

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.

CVSS:: 5.3
Affected:: up to 3.4.0
Fixed in:: 3.4.0
Disclosed:: Sep 15, 2021

CVE-2021-24677 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database