Headless Cms Plugin
Monthly
Unauthenticated information disclosure in Headless CMS Plugin through version 2.0.4 allows remote attackers to read draft, private, and scheduled WordPress post content through the /wp-json/rae/v1/post REST endpoint by manipulating the post_id or post_slug argument handled by get_required_post_data. The plugin's default REST route is reachable without credentials or user interaction when the plugin is installed and active, so exposure is limited mainly by whether a site uses this plugin. This is a genuine but moderate-priority issue rather than a critical emergency: the supplied intelligence does not confirm active exploitation, and a public PoC reference exists but is not verified as working exploit code.
Unauthenticated information disclosure in Headless CMS Plugin through version 2.0.4 allows remote attackers to read draft, private, and scheduled WordPress post content through the /wp-json/rae/v1/post REST endpoint by manipulating the post_id or post_slug argument handled by get_required_post_data. The plugin's default REST route is reachable without credentials or user interaction when the plugin is installed and active, so exposure is limited mainly by whether a site uses this plugin. This is a genuine but moderate-priority issue rather than a critical emergency: the supplied intelligence does not confirm active exploitation, and a public PoC reference exists but is not verified as working exploit code.