blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2021-24677

MEDIUM 5.3 CVSS 3.1
Published
October 18, 2021
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-862
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.

Affected products and versions

  • Unknown Find My Blocks — From 3.4.0 (including) to 3.4.0 (excluding)
  • find_my_blocks_project find_my_blocks — Before 3.4.0

References

  • wpscan.com https://wpscan.com/vulnerability/40c7e424-9a97-41ab-a312-2a06b607609a Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record