The Sight – Professional Image Gallery and Portfolio plugin for WordPress suffers from a missing capability check in the 'handler_post_title' function in all versions up to 1.1.2. This authorization bypass vulnerability (CWE-862) enables unauthenticated attackers to retrieve titles of posts that are private, pending, trashed, or drafts, potentially exposing sensitive unpublished content. Successful exploitation depends on the presence and activation of the Elementor plugin. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required, impacting confidentiality only.

The vulnerability allows unauthorized disclosure of post titles that are not publicly visible, including private, pending, trashed, and draft posts. This could lead to information leakage about unpublished or sensitive content. There is no impact on data integrity or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider disabling the Sight plugin or the Elementor plugin if not required, to reduce exposure. Monitor vendor channels for updates and apply patches promptly once released.