← Back

Andypalmer

andypalmer

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Post Lockdown
post_lockdown
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-1504
1Andypalmer
1Post Lockdown
Jun 17, 2026
Mar 8, 2025
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The Post Lockdown plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.0.2 via the 'pl_autocomplete' AJAX action due to insufficient restrictions on which posts can be includ...Show more
The Post Lockdown plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.0.2 via the 'pl_autocomplete' AJAX action due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract data from password protected, private, or draft posts that they should not have access to.Show less