Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Andypalmer Component: Post Lockdown Clear all filters
TI-2025-01293 CVE-2025-1504 · GHSA-5q65-hq89-vxj6

Post Lockdown <= 4.0.2 - Missing Authorization to Authenticated (Subscriber+) Post Disclosure

Priority LOW 29

The Post Lockdown plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.0.2 via the 'pl_autocomplete' AJAX action due to insufficient restrictions on which posts can be includ…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00329 Published 2025-03-08 No fix listed CWE-862