Unauthenticated Access to Draft and Private Posts in Relevanssi WordPress Plugin

Unauthenticated Access to Draft and Private Posts in Relevanssi WordPress Plugin

CVE-2023-7199 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

The Relevanssi WordPress plugin before 4.22.0, Relevanssi Premium WordPress plugin before 2.25.0 allows any unauthenticated user to read draft and private posts via a crafted request

Learn more about our Wordpress Pen Testing.