Threats tagged 'ghsa-45qh-hqj8-xp45'

A vulnerability in the Gutenberg Essential Blocks WordPress plugin before version 6.4.0 allows unauthenticated users to read published entries of custom post types that are registered as non-public. This occurs because the plugin does not verify that an attacker-supplied post type is publicly viewable before querying it in one of its public REST routes. The vulnerability is classified as CWE-200 (Information Exposure) and has a high severity rating with a CVSS score of 7.5.