Report
The W4 Post List plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 2.4.5 via the post_excerpt function. This can allow authenticated attackers, with subscriber-level permissions and above, to view password protected posts.
Score:4.3
Severity:Medium
Version:< 2.4.6
There is a patch available in v2.4.6 and we strongly recommend you update to this version as soon as possible.