Threats tagged 'ghsa-88jc-p652-m75v'

The Related Posts for WordPress plugin (up to version 3.0.0) has a vulnerability that allows authenticated users with Contributor-level access or higher to read titles of non-public posts authored by others. This occurs because the plugin fails to properly verify read permissions on child post IDs when linking posts, exposing titles of drafts, pending, private, future, or trashed posts in the editor meta box.