CVE · Medium
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2021-24775 | Document Embedder – let visitors read files without downloading [document-emberdder] < 1.7.6 | Exposure of Resource to Wrong Sphere | Medium 5.3 | < 1.7.6 | 1.7.6 | 2022-01-03 | — |
The Document Embedder plugin prior to version 1.7.5 includes a REST endpoint that lacks proper access controls, enabling unauthenticated attackers to discover titles of private and draft posts through enumeration attacks.
Based on public CVE data (MITRE/NVD).
No signup, no credit card — enter your URL and get a security report in seconds.