title: Find My Blocks < 3.4.0 - Private Post Titles Disclosure
description: The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.
problem types: CWE-862 Missing Authorization
affected:
{
product: Find My Blocks
vendor: Unknown
versions:
lessThan: 3.4.0, status: affected, version: 3.4.0, versionType: custom
}