https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T19:28:22.408073+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-0908 CVE-2024-0908 — Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page <= 1.13.4 - Missing Authorization to Informati… 2026-10-20T19:28:22.409528+00:00

Affected: bplugins Advanced Post Block – Showcase Posts with Grid, List, Card Layouts and Filters, abuhayat advanced_post_block

The Advanced Post Block – Display Posts, Pages, or Custom Posts on Your Page plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the apbPosts() function hooked via an AJAX action in all versions up to, and including, 1.13.4. This makes it possible for unauthenticated attackers to retrieve all post data, including those that may be password protected.