Threats tagged 'ghsa-g37c-4g9f-f29v'

Bricks Theme version 2.4 and earlier for WordPress has an unauthenticated broken access control vulnerability in the load_popup_content REST endpoint. This flaw allows anonymous attackers to read draft and unpublished page content by manipulating the popupId parameter without any status or capability checks. Attackers can use a public nonce obtained via the bricks_regenerate_query_nonce action to enumerate confidential unpublished posts on the site.