Unauthenticated disclosure of draft/private/pending post titles & IDs via Secure Custom Fields nopriv AJAX field-query handlers (post_object/relations
By jakubk to WordPress | Resolved | Medium | $0
Share this article
By jakubk to WordPress | Resolved | Medium | $0