CVE-2021-24775: 
WordPress vulnerability analysis and mitigation

The Document Embedder WordPress plugin (versions before 1.7.5) was identified with a security vulnerability tracked as CVE-2021-24775. The vulnerability was discovered by researcher apple502j and was publicly disclosed on January 3, 2022. This security issue affects the WordPress plugin 'document-embedder' and was assigned a CVSS score of 5.3 (medium severity) (WPScan).

The vulnerability stems from an insecure REST endpoint implementation in the Document Embedder plugin. The issue is classified as a Sensitive Data Disclosure vulnerability, falling under the OWASP Top 10 category A3: Sensitive Data Exposure and CWE-200. The vulnerability received a CVSS score of 5.3, indicating medium severity (WPScan).

The vulnerability allows unauthenticated users to enumerate and access the titles of private and draft posts that should otherwise be restricted. This represents a breach of content confidentiality for WordPress sites using the affected plugin versions (WPScan).

The vulnerability has been patched in version 1.7.5 of the Document Embedder plugin. Users are advised to update their installations to this version or newer to mitigate the security risk (WPScan).