VYPR

Post Lockdown

by Post Lockdown

CVEs (1)

  • CVE-2025-1504MedMar 8, 2025
    risk 0.28cvss 4.3epss 0.00

    The Post Lockdown plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.0.2 via the 'pl_autocomplete' AJAX action due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers,…