CVE-2021-24677

5.3 mediumEPSS 1.3%

Medium (5.3) in find my blocks project find my blocks. EPSS 1.3% chance of exploitation in the next 30 days.

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2021-10-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

find_my_blocks_project:find_my_blocks

References

https://wpscan.com/vulnerability/40c7e424-9a97-41ab-a312-2a06b607609a
https://wpscan.com/vulnerability/40c7e424-9a97-41ab-a312-2a06b607609a

Check your stack JSON