CVE-2021-24775: Bplugins Document Embedder

Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days.

The Document Embedder WordPress plugin before 1.7.5 contains a REST endpoint, which could allow unauthenticated users to enumerate the title of arbitrary private and draft posts.

Affected products

• Bplugins Document Embedder: before 1.7.5 (fixed in 1.7.5)

Published 2022-02-01. Last modified 2026-06-17.