| Package | Affected versions | Patched versions |
|---|---|---|
| document embedder | < 1.7.5 | 1.7.5 |
The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free