PostX Gutenberg Blocks Saved Templates Addon < 2.4.10 - Private Content Disclosure

The plugin, with Saved Templates Addon enabled, allows users with Contributor roles or higher to read password-protected or private post contents the user is otherwise unable to read, given the post ID.

If the post 1234, created by other users, is set as private, save [gutenberg_post_blocks id="1234"] and preview. The private post's contents will be displayed.