Advanced Posts Listing Show Post List Easily
Monthly
Unauthenticated broken access control in the WordPress plugin Advanced Posts Listing - Show Post List Easily (versions 1.0.8 and earlier) lets remote attackers retrieve protected post or listing data without logging in or triggering any user interaction. With a CVSS 3.1 score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) and CWE-862 missing authorization, the flaw is a confidentiality-only issue: it exposes data but does not allow modification or denial of service. No confirmed active exploitation (CISA KEV) or public exploit code has been identified at time of analysis, and the primary limiting factor is deployment-only sites running this specific, low-footprint plugin are affected.
Unauthenticated broken access control in the WordPress plugin Advanced Posts Listing - Show Post List Easily (versions 1.0.8 and earlier) lets remote attackers retrieve protected post or listing data without logging in or triggering any user interaction. With a CVSS 3.1 score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) and CWE-862 missing authorization, the flaw is a confidentiality-only issue: it exposes data but does not allow modification or denial of service. No confirmed active exploitation (CISA KEV) or public exploit code has been identified at time of analysis, and the primary limiting factor is deployment-only sites running this specific, low-footprint plugin are affected.