Threats tagged 'ghsa-hr55-whqv-38v8'

Bricks Builder versions 2.4.3 and earlier have a broken access control vulnerability that allows unauthenticated attackers to access restricted post content. By submitting crafted post_status and post_type values to a specific REST endpoint with a publicly obtainable nonce, attackers can view unpublished posts, private content, and WooCommerce coupon data that should be restricted.