CyberRota Analysis
AI-GeneratedThe Meow Gallery WordPress plugin prior to version 5.5.5 is vulnerable due to inadequate capability checks, enabling authenticated users with Author-level access and above to access and disclose sensitive information, including titles and statuses of other users' draft and private posts. This exposure could lead to privacy breaches and unauthorized information disclosure within a WordPress site. WordPress administrators and site owners using this plugin should prioritize updating to the latest version to mitigate potential risks.
Original NVD Description
The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data, allowing authenticated users with Author-level access and above to disclose the titles, authors, dates and statuses of other users' draft and private posts.