CyberRota Analysis
AI-GeneratedThe Gutenberg Essential Blocks plugin for WordPress prior to version 6.4.0 is vulnerable due to inadequate verification of post type visibility, enabling unauthenticated users to access and read entries of custom post types that should be restricted. This flaw can lead to unauthorized exposure of sensitive content, making it critical for WordPress site administrators using this plugin to prioritize an update to mitigate potential data leaks. Users of this plugin should assess their exposure and implement the necessary patch to secure their sites.
Original NVD Description
The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not verify that an attacker-supplied post type is publicly viewable before querying it in one of its public REST routes, allowing unauthenticated users to read published entries of custom post types that the site registered as non-public.