CVE-2021-24845

Name of the Vulnerable Software and Affected Versions: Improved Include Page WordPress plugin versions 1.2 and earlier

Description: The issue allows users with a role as low as Contributor to gain access to content they are not supposed to by passing shortcode attributes with post type and post status. This can be used to retrieve arbitrary content.

Recommendations: For Improved Include Page WordPress plugin versions 1.2 and earlier, consider disabling the shortcode functionality until a patch is available to prevent users from accessing unauthorized content. Restrict access to the post type and post status attributes to minimize the risk of exploitation.