B Slider Gutenberg Slider Block for WordPress Information Exposure Vulnerability

A vulnerability allowing information exposure has been identified in the B Slider Gutenberg Slider Block for WordPress, affecting all versions through 1.1.23. The issue arises from inadequate restrictions on which posts can be included via the 'bsb-slider' shortcode. This flaw enables authenticated attackers with Contributor-level access and above to access and extract data from private posts that should otherwise be restricted.

Impact

Exploitation of this vulnerability allows for unauthorized access to private post data, which could be misused or disclosed without proper authorization.

Remediation

Users are advised to update the B Slider Gutenberg Slider Block for WordPress to version 1.1.24 or a newer patched version.