Threats tagged 'ghsa-gx4w-f9jp-mv56'

The List category posts plugin for WordPress up to and including version 0.92.0 has an information exposure vulnerability via the 'catlist' shortcode. Authenticated users with contributor-level access or higher can access data from password protected, private, or draft posts that they should not be able to view.