| Package | Affected versions | Patched versions |
|---|---|---|
| document embedder | < 1.7.9 | 1.7.9 |
The Document Embedder WordPress plugin before 1.7.9 contains a AJAX action endpoint, which could allow any authenticated user, such as subscriber to enumerate the title of arbitrary private and draft posts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free