Description
The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Find My Blocks | 3.4.0 – < 3.4.0 | 3.4.0 |