Page Builder: Pagelayer Information Exposure Vulnerability in WordPress Plugin

A vulnerability allowing information exposure has been identified in the Page Builder: Pagelayer – Drag and Drop website builder plugin for WordPress. This issue affects all versions through 1.9.8. The vulnerability arises in the 'pagelayer_builder_posts_shortcode' function, where inadequate restrictions allow authenticated attackers with Contributor-level access and above to access and extract data from private posts that should remain confidential.

Impact

Exploitation of this vulnerability could lead to unauthorized access to private post data, allowing attackers to view information they are not entitled to.

Remediation

Users are advised to update the plugin to version 1.9.9 or a newer patched version.