CVE-2021-24677: Find My Blocks Project Find My Blocks

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The Find My Blocks WordPress plugin before 3.4.0 does not have authorisation checks in its REST API, which could allow unauthenticated users to enumerate private posts' titles.

Affected products

• Find My Blocks Project Find My Blocks: before 3.4.0 (fixed in 3.4.0)

Published 2021-10-18. Last modified 2026-06-17.