Read the docs

Find My Blocks Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Find My Blocks Project records in CISA KEV

No Find My Blocks Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Find My Blocks 1 record LOW

Records

1 record

TI-2021-06959 CVE-2021-24677 · GHSA-8r7r-rv2m-h23v

Find My Blocks < 3.4.0 - Private Post Titles Disclosure

Priority LOW 27

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01252 Published 2021-10-18 Fixed in 3.4.0 CWE-862
Open these records in search →