Cpe:2.3:a:bricks:theme:*:*:*:*:*:*:*:*

Bricks Theme versions 2.4 and earlier are vulnerable to an unauthenticated broken access control flaw allowing attackers to enumerate and disclose draft or unpublished post content via the load_popup_content REST endpoint.