Omnipress WordPress Plugin Information Exposure Vulnerability

A vulnerability allowing information exposure exists in the Omnipress plugin for WordPress, affecting all versions through 1.5.4. The issue arises in the megamenu block, where inadequate restrictions allow authenticated attackers with Contributor-level access and above to access data from password-protected, private, or draft posts that should be off-limits.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive post data, including content from password-protected, private, or draft posts.

Remediation

Users are advised to update the Omnipress WordPress plugin to version 1.5.5 or a newer patched version.