Product
Bricks Theme versions 2.4 and earlier are vulnerable to an unauthenticated broken access control flaw allowing attackers to enumerate and disclose draft or unpublished post content via the load_popup_content REST endpoint.