Threats tagged 'ghsa-jcpv-fxpw-qc4w'

The Related Posts for WordPress plugin (up to version 3.0.0) has a vulnerability that allows authenticated users with contributor-level access or higher to view titles and publication dates of all private posts across the site. This exposure occurs because the plugin's authorization checks are insufficient, permitting contributors to bypass intended restrictions that normally limit access to editors and above.