https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 13 Nov 2026 14:13:52 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-10780 <p>The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2. This is due to the static_block_content() shortcode handler retrieving a post via get_post() using an attacker-supplied &#39;id&#39; attribute and outputting its post_content without verifying the post&#39;s status (private, draft, pending) or the requesting user&#39;s capability to view it. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary posts, including private and draft static blocks (and any other post type) created by administrators, by embedding the [static_block_content id=&#34;X&#34;] shortcode in their own content and previewing it.</p> <p>The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2. This is due to the static_block_content() shortcode handler retrieving a post via get_post() using an attacker-supplied &#39;id&#39; attribute and outputting its post_content without verifying the post&#39;s status (private, draft, pending) or the requesting user&#39;s capability to view it. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary posts, including private and draft static blocks (and any other post type) created by administrators, by embedding the [static_block_content id=&#34;X&#34;] shortcode in their own content and previewing it.</p> https://db.gcve.eu/vuln/fkie_cve-2026-10780 https://db.gcve.eu/vuln/ghsa-3hxp-mvw5-v9p7 <p>The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2. This is due to the static_block_content() shortcode handler retrieving a post via get_post() using an attacker-supplied &#39;id&#39; attribute and outputting its post_content without verifying the post&#39;s status (private, draft, pending) or the requesting user&#39;s capability to view it. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary posts, including private and draft static blocks (and any other post type) created by administrators, by embedding the [static_block_content id=&#34;X&#34;] shortcode in their own content and previewing it.</p> <p>The Static Block plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2. This is due to the static_block_content() shortcode handler retrieving a post via get_post() using an attacker-supplied &#39;id&#39; attribute and outputting its post_content without verifying the post&#39;s status (private, draft, pending) or the requesting user&#39;s capability to view it. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary posts, including private and draft static blocks (and any other post type) created by administrators, by embedding the [static_block_content id=&#34;X&#34;] shortcode in their own content and previewing it.</p> https://db.gcve.eu/vuln/ghsa-3hxp-mvw5-v9p7