- Affected Application: WordPress (versions 5.2.3 and prior)
- CVE Identifier: CVE-2019-17671
- CVSS Impact Score: 5.3 (Medium)
Impact & Description:
An unauthenticated disclosure flaw was identified in WordPress core that could allow unauthorized users to view private or draft posts via specific parameter manipulations.
Action & Recommendation:
Our server WAF protection is active and mitigating exploit attempts. We strongly recommend that you upgrade your WordPress installation to the latest version.