WordPress <= 5.2.4 - Unauthenticated View Private/Draft Posts
WordPress before 5.2.4 contains an information disclosure caused by mishandling of the static query property, letting unauthenticated users view certain content, exploit requires no authentication. References: https://blog.wpscan.com/wordpress/security/release/2019/10/15/wordpress-523-security-and-maintenance-release.html https://core.trac.wordpress.org/changeset/46474 https://nvd.nist.gov/vuln/detail/CVE-2019-17671 https://seclists.org/bugtraq/2020/Jan/8 Remediation: Update to WordPress 5.2.4 or later.
url