ID:1450 - Exploit for Improper access control in WordPress - CVE-2019-17671

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain unauthorized access to otherwise restricted functionality.

The vulnerability exists in the "WP_Query" due to improper access restrictions to private and draft posts. A remote unauthenticated attacker can use a method to view posts.

Example:

http://[host]/?static=1&order=asc

Remediation