{"id":3177,"date":"2024-03-12T11:45:18","date_gmt":"2024-03-12T11:45:18","guid":{"rendered":"http:\/\/127.0.0.1\/exposicion-de-informacion-sensible-a-traves-del-endpoint-de-la-api-get_posts-en-post-grid-combo\/"},"modified":"2024-03-12T11:45:18","modified_gmt":"2024-03-12T11:45:18","slug":"exposicion-de-informacion-sensible-a-traves-del-endpoint-de-la-api-get_posts-en-post-grid-combo","status":"publish","type":"post","link":"http:\/\/127.0.0.1\/exposicion-de-informacion-sensible-a-traves-del-endpoint-de-la-api-get_posts-en-post-grid-combo\/","title":{"rendered":"Exposici\u00f3n de Informaci\u00f3n Sensible a trav\u00e9s del Endpoint de la API get_posts en Post Grid Combo"},"content":{"rendered":"
<\/p>\n
El plugin Post Grid Combo – 36+ Gutenberg Blocks para WordPress es vulnerable a la exposici\u00f3n de informaci\u00f3n sensible en todas las versiones hasta, e incluyendo, la 2.2.68 a trav\u00e9s del Endpoint ‘get_posts’ de la API REST. Esto permite que atacantes no autenticados extraigan datos sensibles que incluyen publicaciones completas en borrador y publicaciones protegidas […]<\/p>\n","protected":false},"author":0,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[890],"class_list":["post-3177","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-cve-2023-7072"],"yoast_head":"\n