| Package | Affected versions | Patched versions |
|---|---|---|
| find my blocks | < 3.4.0 | 3.4.0 |
The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free