Threats tagged 'ghsa-m8q9-9v2x-jmjr'

The Recipe Card Blocks Lite WordPress plugin versions before 3.6.4 have a vulnerability where unauthenticated users can access unpublished post details through the recipe print feature. This flaw allows disclosure of titles, IDs, and recipe content from drafts, pending, private, and password-protected posts containing recipe card blocks. The plugin's optional protection to print only published posts is ineffective because it checks the status of a different post than the one rendered.