CyberRota Analysis
AI-GeneratedThe Content Views WordPress plugin prior to version 4.5.1.2 is vulnerable due to insufficient access controls, allowing unauthenticated attackers to access the titles and content of non-public posts, including drafts and private entries. This exposure can lead to unauthorized information disclosure, potentially compromising sensitive content. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate this risk.
Original NVD Description
The Content Views WordPress plugin before 4.5.1.2 does not check whether the user requesting a view is allowed to read the posts it returns, allowing unauthenticated attackers to obtain the title and content of non-public posts, such as draft, pending, private and scheduled posts, when a view has been configured to include them.