CVE-2023-1911 (published 2023-05-02T07:04:59.433Z)
The Blocksy Companion WordPress plugin before 1.8.82 does not ensure that posts to be accessed via a shortcode are already public and can be viewed, allowing any authenticated users, such as subscriber to access draft posts for example
Affected products: Vendor: Unknown
Product: Blocksy Companion
Versions: 0